Trust & Privacy

Wallora is a curated wallpaper gallery. Visitors can browse, preview, and download wallpapers. Signed-in users can like wallpapers and (for administrators) manage uploads and collections.

Accounts are optional for browsing. When you sign in, authentication is handled by our backend provider using email/password or Google sign-in. Passwords are never stored or handled by Wallora directly — they are managed by the authentication provider.

Administrator actions (uploads, collection management) are gated by server-side role checks, not by client-side flags.

• Account email and basic profile information (only if you sign in).
• Likes you create while signed in, associated with your user ID.
• Anonymized traffic analytics (Google Analytics with IP anonymization) to understand page popularity.

We do not sell personal data. We do not run advertising trackers beyond the analytics listed above.

Application data is stored in our managed backend with row-level security policies that restrict access to the owning user or to verified administrators. Connections to the site and backend are served over HTTPS.

Server-side secrets (API keys, service credentials) are kept out of client code and are accessed only by server functions running in our hosting environment.

• Backend, authentication and storage: our managed cloud backend provider.
• Image delivery & transformations: Cloudinary.
• Analytics: Google Analytics (with IP anonymization).
• Fonts: Google Fonts.

Each service receives only the data needed to perform its function (e.g. the image URL for delivery, anonymized page views for analytics).

• You can sign out at any time from the account menu.
• To request deletion of your account and associated likes, contact us at the address below.
• You can block analytics with standard browser privacy tools or extensions.

If you believe you've found a security or privacy issue with Wallora, please reach out so we can investigate. Please avoid testing that could affect other users (e.g. automated scanning, denial-of-service, or accessing data that isn't yours).

We may update this page as the product evolves. Material changes will be reflected here; this is editable content maintained by Wallora and is not an independent attestation.