Privacy Policy
Last updated: June 2026
The short version
- We only collect your email address and a hashed password when you register.
- We do not sell your data or use any third-party trackers.
- We use only essential session cookies - no advertising cookies.
- You can delete your account and all your data at any time.
- We will notify you by email if your data is ever affected by a security breach.
WallpaperTrove ("we", "us", or "our") operates wallpapertrove.org. This page explains what information we collect, how we use it, and your rights regarding that information. We have written this policy to be as clear and straightforward as possible.
1. Information We Collect
We collect the minimum information necessary to provide the Service.
Information you provide directly when creating an account:
- Email address - used to identify your account, send password resets, and deliver important service notices.
- Password - stored exclusively as a one-way bcrypt hash with a per-user salt. We never store, log, or transmit your plaintext password.
Information collected automatically while you use the Service:
- IP address and user-agent string - recorded in standard server access logs for security, abuse prevention, and rate limiting. These logs are not linked to registered accounts.
- Pages visited and interactions - basic aggregate statistics about which gallery pages are viewed and how features are used, stored internally for improving the Service. No data is sent to external analytics providers.
We do not collect your name, phone number, location, payment details, or any other personal information beyond what is listed above.
2. How We Use Your Information
- To create and manage your account and remember your preferences.
- To send password reset emails and important service announcements (not marketing unless you opt in).
- To detect, investigate, and prevent abuse, spam, and unauthorised access.
- To improve the gallery and user experience through aggregate, anonymised analytics.
- To comply with legal obligations where required.
We do not sell, rent, or trade your personal data. We do not share it with third parties except where required by applicable law or a valid legal process such as a court order.
3. Cookies & Local Storage
WallpaperTrove uses only essential cookies and browser local storage. Specifically:
- Session cookie - a short-lived token that keeps you logged in during a browsing session. It is deleted when you log out or your session expires.
- Preference storage - local storage may hold UI preferences such as your chosen sort order or filter state. This data never leaves your device.
We do not use advertising cookies, cross-site tracking cookies, or any third-party scripts that set cookies (such as Google Analytics, Facebook Pixel, or similar). You can disable cookies in your browser; the gallery is fully browseable without an account.
4. Third-Party Content
Wallpapers displayed on WallpaperTrove are sourced from various public platforms including wallhaven.cc, Reddit, Unsplash, Pexels, ArtStation, and others. Each wallpaper remains the intellectual property of its original creator. We do not claim ownership over any wallpaper images hosted or linked from this site.
We make reasonable efforts to attribute creators and link back to original sources where this information is available. If you are a rights holder and believe content hosted here infringes your copyright, please contact us using the details in Section 10 and we will remove it promptly.
5. Data Retention
- Account data (email and password hash) is retained for as long as your account is active.
- Account deletion - when you delete your account all associated personal data is permanently and irreversibly deleted within 30 days.
- Server access logs are automatically rotated and permanently deleted on a rolling 14-day basis.
- Anonymised aggregate analytics may be retained indefinitely as they contain no personal identifiers.
6. Security
We implement reasonable technical and organisational measures to protect your data:
- HTTPS / TLS encryption for all traffic between your browser and our servers.
- Bcrypt password hashing with a per-account salt - brute-forcing is computationally expensive even if our database were somehow accessed.
- Rate limiting on all authentication and API endpoints to mitigate brute-force and credential-stuffing attacks.
- Access control - database and server access is restricted to authorised operators only.
No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we will promptly notify registered users by email of any confirmed breach that affects their personal data.
7. Your Rights
Regardless of where you are located, you have the following rights over your personal data:
- Access - request a copy of the personal data we hold about you.
- Correction - request correction of inaccurate or incomplete data.
- Deletion - delete your account and all associated personal data at any time via your account settings.
- Objection - object to or restrict the processing of your data in certain circumstances.
- Portability - request your data in a structured, machine-readable format.
To exercise any of these rights, use the account settings page or contact us directly. We will respond to all requests within 30 days.
8. Children's Privacy
WallpaperTrove is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify registered users of significant changes by email at least 14 days before they take effect. The "last updated" date at the top of this page always reflects the most recent revision. Continued use of the Service after changes take effect constitutes your acceptance of the revised Policy.