MacWall Privacy Policy

• Hosting and security logs. Cloudflare, which hosts the Site, processes your IP address, browser user agent and request details to deliver pages and protect the Site.
• Your country. We read your approximate country from Cloudflare's location header to show regional prices and to decide whether to ask for cookie consent, and keep it in the mw_country cookie. If the header is missing when you load pricing or start a checkout, our server sends your IP address to ipwho.is to look the country up.
• Our own site analytics. For every visitor, wherever they are and before any cookie choice, the Site records a sample of page views on marketing pages (about 1 in 10) and events such as download, pricing and checkout clicks in our database (Supabase). Each record holds the page path, the referring page, your browser user agent, your country and a random session ID kept in your browser's local storage (macwall_analytics_session). Installer downloads are recorded the same way; when no session ID is available we use a one-way hash of your IP address and browser instead.
• Ahrefs Web Analytics runs on marketing pages for every visitor. It sets no cookies and counts visits from your IP address, browser and referrer.
• Optional analytics and ad measurement. In the EEA, UK and Switzerland these load only after you choose “Accept all”; elsewhere they load by default; and they never load in a browser that sends Global Privacy Control. They are:
  • PostHog (product analytics): page views, time on page, clicks on download, pricing and checkout, page-speed measurements (Core Web Vitals), and a recording of the session for about 1 in 10 visits, showing the page layout, scrolling and clicks with all text and form inputs masked. PostHog does not run on the activation, support or admin pages. If you open the Site from a link in the App, the link carries your App install ID (visitor_id) and PostHog connects that visit to the App's analytics profile.
  • Google Analytics, Meta Pixel, TikTok Pixel and X Pixel on marketing pages (not on legal, docs or learn pages): visits and which ads lead to downloads and purchases. They set their own cookies.
  • Affonso: if you arrive through an affiliate link, a cookie records the referral so the affiliate can be credited.
• “Email me the link”. If you ask for the download link by email (for example on a phone), we store your email and the wallpaper you were viewing, send the link and one reminder a day later.

Cookie names, lifetimes and your choices are in our Cookie Policy.

• Payment. Checkout runs on Stripe's pages. You give your payment details, email and billing country (and address where needed) to Stripe; card details never reach our servers. We receive your email, country, the amount, currency, any discount code and Stripe's payment references.
• License records. We create your license key and store it with your email, plan, number of Macs, country, payment references and, if you started checkout from the App, the install ID of that Mac so the App can unlock itself.
• Links from the App or our emails can carry your email and install ID to checkout, so the email is filled in and the purchase reaches your Mac. We keep them in the mw_lead_email and mw_visitor_id cookies for 30 days.
• Purchase measurement, sent by our server. When a purchase completes, our server sends:
  • to TikTok (Events API): a SHA-256 hash of your email, the order value and currency, and, only if you had accepted ad cookies when you started checkout, the TikTok click ID and cookie, your IP address and browser user agent;
  • to X (Conversions API): a SHA-256 hash of your email;
  • to PostHog: your email, the amount, currency, plan, discount code and country, linked to your App install ID when there is one.
  These server-side messages are sent for every purchase, wherever you are, whatever you chose in the cookie banner and whether or not your browser sends Global Privacy Control. A hashed email can be matched by TikTok or X to an account you have with them.
• Affiliate referrals. If an affiliate referred you, the referral ID is attached to your Stripe payment so the affiliate can be credited through Affonso.

• Install ID and device token. On first launch the App creates a random install ID and a device token. They identify your Mac for likes, submissions, support chat, the trial and analytics, without an account.
• Catalog. Browsing and downloading wallpapers sends ordinary requests (with your IP address) to our database (Supabase) and media storage (Cloudflare). Likes are stored with your install ID.
• App analytics (PostHog). The App sends usage events such as launches, onboarding steps, screens viewed, wallpapers opened and applied, searches, settings changed, offers shown, checkout started, errors and crash reports, together with your install ID, app and macOS version, Mac model, chip, memory, number of displays and plan. PostHog may estimate a rough location from the connection's IP address. If you start a trial, the email you enter is added to the same analytics profile. Names of videos you import are never sent. The App does not currently have a setting to turn analytics off.
• Free trial. To start the trial, the App sends your Mac's hardware identifier (its platform UUID) to our licensing server, which stores only a SHA-256 hash of it so each Mac gets one trial. The email you enter is stored with your install ID, device token, and app and macOS version, and is used for the trial emails described below.
• License activation and checks. When you activate Pro, and when the App re-checks your license (about once a week), it sends the license key and the hardware identifier; the server stores a hash of the identifier to count your Macs.
• Community submissions. If you submit a wallpaper, we receive the video or image, its thumbnail, title and category, the author name you enter (shown publicly with the wallpaper), your rights declaration (whether you made it or have a license, and any rights holder, source link, license type and permission link you give), the time you declared it, and the install ID and device token of the Mac that sent it. We use these to review the submission, keep a record of its origin and rights, handle copyright notices and, if approved, publish it. To suggest a title and category, our server sends OpenAI the thumbnail (not the video), the file name and any draft title; see the Terms.
• Support chat. If you contact us in the App, we receive your messages, the name and email you give, screenshots you attach, and your Mac model, chip, memory, macOS and app version. When your chat goes to a person, the App also attaches a diagnostics report: settings, displays, install location, license and trial status (with the key masked) and recent App logs. Screenshots and diagnostics reports are stored in a storage area where anyone who has a file's exact link can open it; the links are long and random and we don't publish them, but they are not password-protected.
• Notifications. If you allow notifications, the App registers an Apple push token with us so we can tell you about support replies, your submissions and App news.

• Automation. With your permission, Music Sync reads the current track (title, artist, album, artwork and position) from Apple Music or Spotify. This stays on your Mac, except: Spotify artwork is downloaded from Spotify's servers; and when the Lock Screen shows the player or lyrics, the App sends the song's title, artist, album and length to LRCLIB (lrclib.net) to find lyrics, and the artist and title to Apple's iTunes Search API when it needs cover art.
• System audio. If you allow it, the App measures how loud the music is, on your Mac, so the wallpaper moves on the beat. The audio is not recorded, stored or sent anywhere.
• Your own videos. Videos you import stay on your Mac and are never uploaded unless you submit them to the catalog.

• Purchase emails: your license key, receipt details and anything needed to deliver what you bought.
• Trial emails: when your trial ends, and up to two follow-ups over the next week (about the money-back-for-a-video program, and a time-limited discount). We sometimes send a one-off offer to people who tried MacWall but didn't buy.
• Checkout reminders: if you open checkout with an email we know, or type your email into checkout, and don't finish, up to three reminders over about three days, some with a discount code.
• App update emails asking customers and trial users to update, sometimes with an offer.
• “Email me the link”: the link and one reminder.
• Every email other than purchase emails has an unsubscribe link that works with one click. Unsubscribing never stops purchase or license emails. Emails are sent through Resend.

• Deliver, activate and enforce licenses and the trial.
• Run the catalog, downloads, search, likes and submissions.
• Answer support requests and fix problems.
• Detect fraud, abuse, key sharing and licensing violations.
• Understand how the Site and App are used, measure which ads and affiliates lead to downloads and purchases, and improve the product.
• Send the emails described above.
• Keep tax and accounting records and comply with law.

We don't sell personal information for money and we don't show ads in the App. The Site's ad pixels and the server-side purchase messages above do share information with ad platforms, which California law can treat as “sharing”; see our CCPA page.

• Contract: selling and delivering licenses, running the trial and the features you turn on (such as Music Sync), and answering support.
• Legitimate interests: security and fraud prevention, one trial per Mac, App analytics and crash reports, our own site analytics and Ahrefs, server-side purchase measurement, and reminder and update emails, balanced against your rights. You can object at any time.
• Consent: PostHog, Google Analytics, Affonso and the ad pixels on the Site. You can withdraw consent at any time.
• Legal obligation: tax and accounting records.

More on your rights: GDPR.

Service providers that run MacWall for us: Stripe (payments), Supabase (database, licensing and storage), Cloudflare (hosting and media), Resend (email), PostHog (analytics), OpenAI (title suggestions) and Apple (push notifications). Other parties that receive data as described above: Google, Meta, TikTok and X (ad measurement), Ahrefs (site analytics), Affonso (affiliate referrals), ipwho.is (country lookup), LRCLIB, Apple's iTunes Search API and Spotify (Music Sync). The full list with what each one does is on our Subprocessors page. We also disclose information when the law requires it, to protect our rights or users, or as part of a sale or reorganization of the business.

• Licenses and purchases: while your license is active and afterward as needed for tax, accounting and fraud prevention.
• Unfinished checkouts: a checkout that expires unpaid (after one hour) has its pending license record deleted automatically, usually within a day. If we had your email for it, the email and checkout reference stay on our reminder list until you ask us to delete them, so we can send the reminders and respect an unsubscribe. Stripe keeps its own record of every checkout.
• Trial records: the hashed hardware identifier is kept so the same Mac doesn't get a second trial; the trial email is kept until you ask us to delete it.
• Community submissions: while under review or published. The record of who submitted a wallpaper, its rights declaration and its moderation history is kept after removal so we can answer copyright notices and enforce our repeat-infringer policy.
• Support chats, site analytics and App analytics: we don't yet delete these on a fixed schedule. You can ask us to delete yours.

You can ask us to delete your data at any time by emailing support@macwall.app, except what we must keep by law.

Wherever you live, you can ask us to access, correct, export or delete your personal data, or object to or restrict how we use it. Email support@macwall.app from the address involved, or include your license key, so we can find your data. We respond within the time the law requires (one month under GDPR, 45 days under CCPA) and won't treat you differently for asking. You can also complain to your local data protection authority.

• Change your cookie choice any time on the Cookie Policy page, or turn on Global Privacy Control in your browser.
• Unsubscribe from any non-purchase email with one click.
• Turn off Music Sync, notifications or the macOS permissions in the App or System Settings.

Most of our providers are based in the United States, and your data may be processed there and in other countries where they operate. Where the law requires it, we rely on the transfer safeguards our providers offer, such as Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

Traffic to the Site and our servers is encrypted in transit, card details are handled only by Stripe, hardware identifiers are stored as one-way hashes, and administrative access is limited to our own staff. See our Security page. No method of transmission or storage is completely secure.

The App and Site are not directed at children under 13 (or the minimum age where you live), and we do not knowingly collect their personal information. If you believe we have, email support@macwall.app and we will delete it.

We may update this Privacy Policy. The current version is always at /legal/privacy with its effective date, and we announce material changes on the Site or in the App.

Privacy questions and requests: support@macwall.app. Last updated October 30, 2026.

The controller responsible for the personal information described here is OG APPS, LLC, which makes and sells MacWall (“we,” “us”). Contact: support@macwall.app.