Privacy Policy

Last updated: 30 May 2026

Artful Walls is a personal project by Domen Bevec. This policy explains what personal data I collect when you use Artful Walls, why I collect it, and what rights you have over it. If you have any questions, email me at dbevec@gmail.com.

1. Data I collect

I collect the following categories of personal data:

Account data

  • Your email address
  • Your display name (if provided by your sign-in provider)
  • A profile picture URL (if provided by Google when you sign in with Google)

App data

  • Wallpapers you have liked or saved as favourites — stored in my database when you are signed in, and only in your browser's local storage when you are not
  • Your personalisation preferences (selected artists and styles) — stored only in your browser's local storage, never sent to my servers

Analytics data

  • Which wallpapers you view, download, or like
  • Device type, operating system, and browser
  • Approximate location at country or region level, derived from your IP address
  • Session duration and in-app navigation patterns

For signed-in users, analytics events are associated with your account ID so I can understand how individual users interact with the app over time. For guests, all analytics events are anonymous.

Technical data

Standard server and CDN access logs may record your IP address, the URL requested, and HTTP metadata (status code, referrer, user-agent). This data is not linked to your account and is subject to the log retention policies of the infrastructure providers below.

2. How and why I use your data

I process your data for the following purposes:

PURPOSE

LAWFUL BASIS

Providing the service — account creation, authentication, syncing your favourites across devices

Performance of a contract

Improving the app — understanding which features are used and how

Legitimate interests

Security and abuse prevention

Legitimate interests

I do not use your data for advertising, profiling, or any form of automated decision-making that produces legal or similarly significant effects.

3. Third-party services

I use the following third-party services to operate the app. Each has its own privacy policy and processes data according to its own terms.

Supabase

supabase.com

Authentication and database. Stores your account credentials and favourites. Data may be processed outside the European Economic Area; Supabase relies on Standard Contractual Clauses as the transfer mechanism.

PostHog

posthog.com — EU region (Frankfurt)

Product analytics. All analytics data is hosted on PostHog's EU infrastructure and does not leave the European Economic Area.

Cloudflare

cloudflare.com

Hosting and CDN. Serves the app and may process standard request metadata (IP address, headers) as part of normal web infrastructure operation.

Google

google.com — optional

OAuth login provider. Only used if you choose "Sign in with Google". Google provides your name and email address to complete sign-in. Google's Privacy Policy applies to this interaction.

I do not sell, rent, or otherwise disclose your personal data to any other third party.

4. Data retention

  • Account data and favourites are retained until you delete your account. You can delete your account at any time from Settings.
  • Analytics data is retained per PostHog's own retention settings. See posthog.com/privacy for details.
  • Server and CDN log retention is governed by Cloudflare's infrastructure policies.
  • Browser local storage (preferences, guest favourites) persists until you clear it yourself or uninstall the app.

5. Cookies and local storage

Artful Walls does not use advertising or tracking cookies. I use browser localStorage to store your personalisation preferences and, if you are not signed in, your saved favourites. PostHog may set a first-party cookie or use localStorage to maintain an anonymous analytics session identifier.

6. Your rights

If you are in the European Economic Area, you have the following rights regarding your personal data:

  • Access — request a copy of the personal data I hold about you.
  • Rectification — ask me to correct inaccurate or incomplete data.
  • Erasure — ask me to delete your data. You can also do this directly by using "Delete account" in Settings.
  • Restriction — ask me to pause processing of your data while a dispute is resolved.
  • Portability — receive your data in a structured, commonly used, machine-readable format.
  • Objection — object to processing carried out on the basis of legitimate interests.
  • Withdraw consent — where any processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, email me at dbevec@gmail.com. I will respond within 30 days and may ask you to verify your identity before acting on a request.

You also have the right to lodge a complaint with a data protection supervisory authority. In Slovenia: Informacijski pooblaščenec (ip-rs.si). In any other EU member state, the authority in your country of residence.

7. Security

All data is transmitted over HTTPS. Access to the database is restricted to authenticated services. I use established, security-focused infrastructure providers (Supabase, Cloudflare) and follow their recommended security configurations. No method of transmission or storage is 100% secure; in the event of a data breach that poses a risk to your rights, I will notify you and the relevant supervisory authority as required by law.

8. Children

Artful Walls is not directed at children under the age of 16. I do not knowingly collect personal data from anyone under 16. If you believe a child has provided me with personal data, please email me and I will delete it promptly.

9. Changes to this policy

I may update this policy as the app evolves. The "last updated" date at the top of this page will always reflect the most recent version. For significant changes, I will make reasonable efforts to notify you — for example, by displaying a notice in the app. Continued use of Artful Walls after a change constitutes acceptance of the updated policy.

10. Contact

For any questions about this policy or to exercise your privacy rights, email me at dbevec@gmail.com.