What stays on your device
Your learning interests, theme, device selection, optional personal note, and custom-background deletion credential are saved in your browser’s localStorage. WallCab does not send them to a profile service or connect them to an identity. Clearing site data removes the local copy, so save a separate deletion link before clearing it.
Optional custom backgrounds
If you choose to upload an image, your browser first resizes it. WallCab validates the file, removes embedded metadata, and stores a normalized copy in private Cloudflare Workers KV. The image is used only to generate wallpapers requested with its unguessable ID; there is no public raw-image address.
Cloudflare Turnstile processes an anti-bot challenge before upload. WallCab receives its verification token and normal request metadata. The upload is automatically removed after 30 days without a wallpaper read. You can delete it sooner with the private link shown after upload. Keep that link secret: anyone who has it can delete the image.
What a wallpaper request contains
The wallpaper API receives the preference values embedded in the URL, standard request metadata such as an IP address and user agent, and the request time. Hosting infrastructure may retain short-lived security and operational logs. WallCab does not build user histories from them.
If you add a personal note, it is included in the copied wallpaper URL so the renderer can place it on the image. Do not enter sensitive information: URL query values may be visible in browser history, Shortcut configuration, and hosting request logs. WallCab does not include the note in its structured application log or store the completed personalized PNG in the shared Worker image cache.
Anonymous wallpaper-run counters
WallCab counts valid wallpaper image requests so the maintainer can understand whether daily automations are running. Website previews, source-status checks, HEAD requests, invalid requests, and internal jobs are excluded.
Each accepted event contains a new random request ID, its timestamp, success or failure, cache delivery mode, external or fallback content mode, resolved category, theme, device-size preset, and response status. It does not contain an IP address, user agent, full URL, selected-interest list, personal note, custom-background ID, phone identifier, or account identifier. Events cannot be joined into a user history and are retained by Cloudflare Analytics Engine for up to three months. Reporting access is limited to a separately protected private administration service.
Optional privacy-first website analytics
A production deployment may enable Cloudflare Web Analytics to understand aggregate page traffic. It uses no cookies and WallCab sends no custom personal identifiers. The analytics script is absent when no public analytics token is configured.
Optional project support
If you choose to support WallCab, Razorpay hosts the payment page and processes the amount, email address, phone number, payment method, receipt, and settlement under its own privacy terms. WallCab does not receive card, bank, UPI credential, or complete payment instrument details.
After a successful payment, Razorpay sends WallCab a signed event containing the payment reference, amount, currency, email address, optional supporter name, and standard payment metadata. WallCab validates it and passes the name when available, email address, amount, and payment reference directly to Resend to deliver one transactional thank-you. WallCab does not write the supporter name, email, phone number, webhook body, or payment reference to its database or application logs. Resend retains delivery records according to its plan and privacy terms.
Third-party requests
WallCab’s server—not your browser—may request learning material from Wikimedia, Datamuse, and Free Dictionary, and imagery from Openverse and its original media host. The generated wallpaper displays source and license credit.
Contact
For a privacy question or deletion request concerning operational logs, open a privacy-labeled issue in the project’s GitHub repository.