Privacy Policy

Last updated: 2 November 2026

In short: Wallfinch has no accounts, no ads, no analytics and no tracking. Your settings, favorites and downloads stay on your device. I don't receive any data about how you use the app.

Who is responsible

Wallfinch is made by Matteo Cioffi, an individual developer based in Italy. I am the data controller for the personal data described on this page. Contact: support@wallfinch.com.

What stays on your device

Your settings and filters, the images you hide, the image cache, the wallpapers you download, your monthly download count and your licence status are stored only on your device. They are never sent to me.

Image sources

To show wallpapers, the app connects directly from your device to the websites it searches (see Credits) and to the services those sites use to deliver images. As with any website you visit, they receive your IP address and standard technical information about the request, and their own privacy policies apply.

Some thumbnails are loaded through wsrv.nl, an open-source image resizing service, which receives your IP address and the address of the image.

Updates and settings from this website

The app downloads two small files from this website: one to check whether a new version is available, and one with settings such as which image sources are active. These requests contain no personal data, but the server sees your IP address (see This website).

Unlimited on Windows

Unlimited is sold by Polar, which acts as merchant of record: it processes the payment, issues the invoice and handles taxes. When you buy, Polar collects the data needed for the purchase, such as your name, email address and payment details, under its own privacy policy. I receive your name, email address and order details from Polar so that I can provide the licence, support and refunds. I never see your card details.

When you activate a licence key, the app sends the key and an anonymous device identifier to Polar to activate it, and checks it again from time to time (about once a week). This is what lets one key work on up to 3 PCs.

The legal basis is the performance of the contract (Art. 6(1)(b) GDPR). I keep order data as long as needed to provide the licence and support, and as long as tax law requires.

Android

When Wallfinch arrives on Android, Unlimited will be sold through Google Play. Google processes the payment under its own privacy policy, and I only see the order information Google makes available to developers.

This website

This website uses no cookies, no analytics and no third-party scripts or fonts. It is hosted on Cloudflare: Cloudflare receives your IP address when you visit and processes it to deliver and protect the site. See the Cloudflare Privacy Policy.

Email

If you write to me, I use your email address and message only to reply, and I delete them when they are no longer needed. Messages to support@wallfinch.com are forwarded by Cloudflare Email Routing to my mailbox, hosted by Google.

Transfers outside the EU

Some of the services mentioned here (Polar, Google, Cloudflare) are based in the United States. They transfer data under the safeguards provided by the GDPR, such as the EU-U.S. Data Privacy Framework or standard contractual clauses.

Your rights

Under the GDPR you can ask to access, correct or delete your personal data, to restrict or object to its processing, and to receive it in a portable format. Write to support@wallfinch.com. You can also lodge a complaint with a data protection authority: in Italy, the Garante per la protezione dei dati personali, or the authority where you live.

Children

Wallfinch is not directed at children under 16, and I don't knowingly collect their data.

Changes

If this policy changes, I will update this page and the date at the top. Important changes will also be announced in the app or on this website.