Controller identity and current feature status
The person or entity operating OpenWall is the controller for personal information used to run this service. “OpenWall” is a trading or service name. The controller's full legal name and geographic address have not yet been supplied. This is an unresolved compliance blocker, not an optional disclosure.
Paid sales, account onboarding, Google Analytics and Google AdSense are disabled in OpenWall's legal configuration while the identity and related provider documentation are completed. Ordinary hosting still necessarily processes the request data described below, so the operator must add the missing identity and address promptly or stop publishing the service. The current privacy and complaints contact is contact@getopenwall.com.
Scope
This notice covers getopenwall.com, the OpenWall web application, premium authentication and entitlement endpoints, and messages sent to OpenWall. When you follow a link to Ko-fi, a source website or another external service, that service processes information under its own privacy information.
Information involved in public website delivery
Your browser necessarily sends network and request information to reach the site. This can include IP address, date and time, requested URL, HTTP headers, referrer where supplied, browser and device information, language, and security or error signals. Cloudflare delivers and protects the site and can process this request information. Cloudflare may also infer a country code from the network request so OpenWall can select an approximate display currency; OpenWall does not need your precise location for that feature.
If a browser directly requests an image or follows a link hosted by an external provider, that provider receives the ordinary request information needed to deliver its page or file. OpenWall is moving uncertain external assets to source-link-only treatment so a source label is not mistaken for permission to redistribute.
Browser-local information
OpenWall can store the following on your device:
- identifiers for wallpapers you ask to save and whether the browser should remember them;
- cookie and storage choices, their version, and the date of the choice;
- the version and time of a browser-local Terms acceptance; and
- if optional analytics is enabled in future and you consent, local interaction summaries and search-demand records.
These public saved items are not stored in a premium account. Anyone who can use the same browser profile may be able to see them. Clear them through the site controls or your browser's site-data controls. The Cookie Policy lists names, purposes and durations.
An image selected for a tool that expressly says it works locally is held in the browser page or session and is not intentionally uploaded to OpenWall. Do not select confidential or sensitive material. Reloading or closing the page may discard it.
Premium accounts and entitlement records
Sales are currently disabled. If premium access is lawfully re-enabled, OpenWall's existing system is designed to process:
- the purchaser's normalised email address, an internal user identifier, verification time, entitlement product and status, and creation/update times;
- Ko-fi webhook data such as message and transaction identifiers, event/payment type, payer email, amount, currency, product name, processing result and receipt time;
- cryptographic hashes of login tokens and session tokens rather than the raw values in the database;
- cryptographic hashes of the requested email and network address for rate limiting, with attempt times; and
- release-update opt-in or opt-out state and times.
The email used for a qualifying purchase is necessary to create and recover the entitlement. Without it, OpenWall cannot provide passwordless account access. Login links are single-use and accepted for 15 minutes. A successful sign-in sets a strictly necessary session cookie accepted for up to 30 days unless you sign out or it is invalidated sooner.
OpenWall does not receive complete card or bank credentials. Ko-fi and its payment providers handle those details. OpenWall receives only the order/payment record needed to decide whether an entitlement should be granted, prevent duplicate processing, handle access or refund issues, and keep required records.
Release emails
Release-update emails are optional and separate from service messages such as a requested sign-in link, receipt, security message or important account notice. Marketing consent must be off by default and recorded by a clear positive choice. It can be withdrawn from the account controls or by contacting OpenWall without affecting paid access. Each marketing email must also provide a valid opt-out route.
Messages, complaints and rights concerns
If you email OpenWall, it processes your address, message, attachments and related metadata to respond, investigate and keep an appropriate record. A source correction or takedown message may also include an image URL, asserted identity or authority, rights evidence and requested action. A privacy complaint or rights request may require limited additional information to verify identity and prevent disclosure to the wrong person.
Do not send more personal information than the issue needs. Do not send passwords, full payment-card details, government identity documents, special-category information or confidential third-party material unless OpenWall has specifically explained a secure and necessary route.
Custom requests and generative AI
Custom wallpaper orders are disabled until the data workflow is documented. Before accepting one, OpenWall must tell the customer whether generative AI is used, which provider will receive the prompt or reference material, the lawful basis, who can access the material, and when it will be deleted.
OpenWall does not currently invite identifiable-person photographs, children's images, sensitive data or confidential material for custom generation. Automated creation of OpenWall's own catalogue images does not intentionally require visitor personal information.
Purposes and lawful bases
OpenWall uses personal information only where a lawful basis applies:
- Contract: to take requested pre-contract steps, record a qualifying order, provide and authenticate premium access, deliver paid content, handle an order or refund, and perform an accepted custom service.
- Legal obligation: to keep records and respond where consumer, tax, accounting, data-protection or other law requires it.
- Legitimate interests: to deliver and secure the site, rate-limit sign-in attempts, detect fraud or abuse, maintain evidence, answer ordinary enquiries, and investigate source, attribution and rights concerns. The interests are reliable service, security, dispute handling and respecting creators; OpenWall must use proportionate data and consider your rights. You may object as described below.
- Consent: for release marketing, optional analytics and any advertising or non-essential storage that requires consent. Consent can be withdrawn at any time for the future.
Under the Privacy and Electronic Communications Regulations, storage or access on a device also requires consent unless it is strictly necessary to transmit a communication or provide a feature the user requested. Saved-item storage is used only after the user asks to save or remember it. Optional support-prompt, analytics and advertising storage must remain off unless the relevant lawful consent control is in place.
Analytics and advertising are currently disabled
OpenWall's configuration contains no Google Analytics measurement ID and no Google AdSense publisher ID, so those scripts should not load. The browser preference panel may still show those categories so they can remain refused and so any future reintroduction requires a deliberate implementation change.
If analytics is re-enabled later, it may process page paths and titles, device/browser categories, section views, wallpaper metadata, searches and result counts, saves, downloads, source-link activity, account-flow events and support-link interactions. Search boxes must not be used for names, email addresses, health information, secrets or other personal/confidential data. The Privacy and Cookie Policies must be updated with the verified Google property settings, retention and transfer details before activation.
Advertising must not be re-enabled for UK, EEA or Swiss traffic until a suitable Google-certified consent management platform is deployed and the selected advertising providers, purposes, legal bases, storage and controls are disclosed.
Who may receive information
Depending on the feature used, information may be processed by:
- Cloudflare, for network delivery, security, Workers, D1 database records and R2/private-file storage;
- Ko-fi and its payment providers, for external checkout, messages, payment and webhook records;
- Resend, to deliver a sign-in email requested for a premium account;
- Google, only if a disabled optional Analytics or AdSense feature is later enabled with the required consent and disclosures;
- Frankfurter, which may receive an ordinary browser request for public exchange-rate data if the OpenWall locale endpoint is unavailable; and
- professional advisers, insurers, auditors, law-enforcement bodies, courts, regulators, a purchaser of the service, or another recipient where reasonably necessary and lawful.
The exact controller/processor role and contract for each production data flow must be recorded before that flow is enabled. OpenWall does not sell a customer list.
International transfers
Some providers operate internationally and information may be accessed or stored outside the UK. A restricted transfer initiated by OpenWall must be covered by UK adequacy regulations or an appropriate safeguard, such as the UK International Data Transfer Agreement or UK Addendum, together with the required data-protection test where applicable.
The operator has not yet completed and published the provider-by-provider transfer map. That is a launch blocker for optional analytics, advertising, sales and custom-request processing; this Policy does not claim a safeguard that has not been verified. You may ask for information about an applicable transfer mechanism once the relevant feature is enabled.
Retention
OpenWall applies, or must adopt before the related feature resumes, the following periods or criteria:
- browser-local items remain until you clear them, switch off the relevant preference, withdraw the relevant consent, or a version change replaces them;
- a login link is rejected after 15 minutes and a session after no more than 30 days; expired database rows and rate-limit hashes must be removed by a scheduled deletion process rather than being kept indefinitely;
- premium identity and entitlement records are needed while the entitlement exists and afterwards only for defined legal, accounting, fraud, dispute and rights-handling periods;
- Ko-fi transaction/event records are kept only for the applicable accounting, tax, fraud, refund, chargeback, limitation and duplicate-processing periods;
- release-email consent is used until withdrawal; a minimal suppression record may be retained to respect an opt-out;
- contact, complaint, security and takedown records are kept for the time needed to resolve the matter and for a documented legal-claims or compliance period; and
- if optional Google services are enabled later, their verified property/provider retention settings will be stated here and in the Cookie Policy.
A complete numeric retention schedule has not yet been adopted for every server-side category. New paid-account onboarding and custom-request processing remain disabled while this is corrected; OpenWall will not invent a period merely to make this notice look complete.
Security
The premium design uses single-use links, hashed authentication and session tokens in the database, hashed email/network identifiers for rate limiting, origin checks on state-changing account requests, private file routes, and Secure, HttpOnly, SameSite=Lax session cookies over HTTPS. Access should be limited to people and providers who need it.
No internet service can promise absolute security. If you believe an account, email link or personal-information flow has been compromised, contact OpenWall promptly and do not include secrets in the initial email.
Your UK data-protection rights
Depending on the circumstances, you may have rights to be informed, obtain access, correct inaccurate information, erase information, restrict processing, object to processing based on legitimate interests or direct marketing, receive certain information in a portable form, and withdraw consent without affecting earlier lawful processing.
Email contact@getopenwall.com with “Data protection request” in the subject. State the right you want to exercise and the email or transaction reference relevant to the request. OpenWall may ask for proportionate verification. Rights are not absolute; if an exemption or retention duty applies, OpenWall will explain it. A rights request is normally answered without undue delay and within the applicable statutory period.
Data-protection complaints
You can complain directly by emailing contact@getopenwall.com with “Data protection complaint” in the subject. Explain what happened, when, the information involved, the impact and the outcome you seek. OpenWall will acknowledge the complaint within 30 days, take appropriate steps to investigate without undue delay, keep you appropriately informed, and communicate the outcome.
You may also complain to the Information Commissioner's Office, the UK data-protection regulator. Its helpline is 0303 123 1113 and its postal address is Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Contacting OpenWall first may allow a quicker resolution, but does not remove your right to approach the ICO.
Automated processing
The system can automatically recognise a qualifying Ko-fi product, create an entitlement, verify a token and rate-limit repeated sign-in attempts. These operations support the requested contract and security. OpenWall does not intend to make solely automated decisions that produce legal or similarly significant effects beyond administering access. Ask for a human review if an automatic entitlement or security result appears wrong.
Children
OpenWall is a general wallpaper service and paid orders are for adults aged 18 or over. OpenWall does not knowingly seek children's account, marketing or custom-request data. A person under 13 should not provide an email address or other personal information; a parent or guardian should contact OpenWall if they believe a child has done so.
Changes to this Policy
The “Last updated” date and policy version change when this notice is materially revised. A significant change affecting an existing premium customer will be brought to their attention where reasonably possible. Provider, retention, advertising, analytics, AI or account changes must be documented before the changed processing starts.