Privacy and data

Privacy Policy

Effective July 21, 2026. Version 2.0. This policy explains how Wallpaper Looma, published by Looma Studio, handles information when you browse, search, download a wallpaper, or follow a link to another service.

Scope and responsible publisher

This policy applies to wallpaperlooma.com and its first-party download routes. Looma Studio is responsible for the limited visitor information described here. It does not cover a third-party website after you leave Wallpaper Looma, even when we link to that website.

Your consent choice

Google Tag Manager and Grow are optional on Wallpaper Looma. Neither service is requested from your browser unless you actively select Accept analytics & ads. Selecting Use necessary only keeps both services blocked.

Your choice is stored on your device under the local-storage key looma-privacy-consent-v1. This preference is necessary to remember your selection and is not used to track you across websites. You can reopen the consent panel at any time with the persistent Privacy choices button.

Information handled when you visit

Normal web requests can contain your IP address, browser and user-agent information, device and operating-system characteristics, language, approximate location inferred from an IP address, requested URL, date and time, referrer, and security or network signals. Hosting, delivery, security, and enabled measurement providers can process this information to return pages and files, prevent abuse, diagnose faults, and measure use.

A search term entered on Wallpaper Looma is placed in the search page URL. It can therefore appear in the request handled by our infrastructure and in page-location measurement sent through enabled tags. Do not enter a name, email address, or other sensitive personal information into the search box. The application does not save search terms in its download database.

Download records

When you request a wallpaper through a first-party download route, the application writes a limited record to Cloudflare D1: the wallpaper or collection identifier, the requested image variant, the time of the request, and a SHA-256 hash of the browser user-agent string. The application does not write your IP address to that D1 download row. A hash reduces exposure of the original user-agent string, but it should not be treated as fully anonymous information.

These records are used to count downloads, identify useful collections, maintain the library, and investigate abnormal download activity. A HEAD request used only to verify a file does not create a download record.

Hosting and site infrastructure

The public site is delivered through Cloudflare infrastructure. Cloudflare Workers handles application requests, R2 stores wallpaper files, D1 stores the limited download records described above, and Cloudflare can process ordinary request and security logs at its edge. Cloudflare Turnstile performs a necessary anti-abuse check before issuing a short-lived download link and can process IP, browser, device, interaction, and security signals for that purpose. Turnstile is a security control rather than optional advertising or analytics and is not disabled by the analytics-consent choice.

Cloudflare's provider-side security and request logs are separate from the D1 download table and are governed by Cloudflare's settings, retention practices, and privacy policy.

The project also has Sites configuration for build or preview delivery. A Sites service processes ordinary request information only when a Sites-hosted or preview address is actually visited; the existence of build configuration alone does not send every wallpaperlooma.com visit to a separate Sites analytics service.

Google Tag Manager and analytics

After you accept analytics and ads, Wallpaper Looma can load its Google Tag Manager container to measure page use, navigation, downloads, performance, and advertising effectiveness. The application places the page URL, path, title, page-view events, consent state, and client-side route-change events in the data layer. Google then receives ordinary network-request information when the Tag Manager script loads.

Google Analytics and other measurement or advertising tags may operate only when they are configured and active inside the consent-gated Tag Manager container. Those tags may process page and event information, IP-derived location, browser or device signals, referrers, and cookies or similar identifiers under the applicable configuration and Google Privacy Policy. Where consent is the applicable legal basis, these optional activities rely on the choice you make in the consent panel.

Grow and Mediavine services

Grow loads only after you accept analytics and ads. Depending on the Grow features active for this site, Grow, Mediavine, and their supporting providers may use ordinary request information, cookies, local storage, or similar technology for audience services, identity, favorites, analytics, advertising, fraud prevention, or service operation. Where consent is the applicable legal basis, this optional processing relies on your consent and remains blocked when you choose necessary services only. These activities are also subject to the feature configuration and Mediavine's privacy information.

Cookies and similar technologies

Wallpaper Looma does not require an account cookie to browse or download. Before you opt in, the first-party consent preference is the only browser storage this consent system requires; Google Tag Manager and Grow are not loaded. After opt-in, configured Tag Manager tags and Grow services may set or read cookies, local storage, pixels, or comparable identifiers for the optional purposes described above.

You can delete or block cookies and site storage in your browser. Doing so may reset the saved choice or limit a third-party feature, but it does not delete records already retained by a provider.

How information is used and disclosed

Information is used to deliver pages and files, secure the service, prevent abuse, count and understand downloads, improve navigation and content planning, measure site performance, operate enabled audience or advertising services, respond to a request, and comply with law. It can be disclosed to infrastructure, analytics, audience, security, and professional-service providers only for the relevant service; when required by law or a valid legal process; or in connection with a reorganization where appropriate safeguards apply.

Where GDPR, UK GDPR, or a similar legal-basis framework applies, necessary delivery and security processing is carried out to provide the service you request and for legitimate interests in operating, securing, and improving the site; legal obligations apply when processing is required by law. Optional analytics, audience, and advertising services are withheld unless you consent. A different mandatory legal basis may apply where local law requires it.

Looma does not exchange the D1 download table for money. Some advertising or measurement disclosures can nevertheless be defined as a sale, sharing, or targeted-advertising use under particular privacy laws. Applicable consent or opt-out rights depend on your location and the services actually active when you visit.

Retention

D1 download records are kept while they remain useful for download trends, content planning, security, and database integrity, and are deleted or aggregated during database maintenance when they are no longer needed. The application currently does not promise a fixed automatic deletion date for each row. Infrastructure, Tag Manager tags, Google services, Grow, and Mediavine can apply their own retention periods and controls. Messages or transactions completed on DeviantArt are retained by DeviantArt under its policies, not in Wallpaper Looma's download table.

International processing

Wallpaper Looma and its providers operate across countries. Technical and measurement information may therefore be processed outside the country where you live. The linked provider privacy notices describe their applicable transfer safeguards. Where law requires an approved transfer mechanism or another lawful basis, optional processing will not be enabled where no lawful transfer mechanism is available.

Your privacy choices and rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or an appeal or complaint to a privacy authority. Wallpaper Looma has no visitor accounts, and many technical records do not identify a person by name, so we may need enough information to verify a request and locate a record. We cannot provide or delete information that we do not control or cannot reasonably connect to the requester.

You can change or withdraw your optional consent at any time through the persistent Privacy choices button. Changing an accepted choice to necessary services only saves the withdrawal and reloads the page so Wallpaper Looma stops loading the optional services. Withdrawal applies going forward; it cannot undo information already sent to a provider or by itself remove provider cookies, local storage, or retained records.

Where applicable, you may complain to the data-protection or supervisory authority for the place where you live or work, or where you believe an infringement occurred.

Use the official Contact page for a privacy request. The listed contact channel is hosted by DeviantArt, so DeviantArt will process the account and message information used to contact us. You can also use browser controls and privacy controls supplied by an active provider.

Children

Wallpaper Looma is a general-audience wallpaper service and is not directed to children under 13 or a higher minimum age required by local law. We do not ask children to create an account or submit profile information. Technical data can still be generated when any device visits the site. A parent or guardian who believes a child has provided personal information can use the official Contact page.

Security

We use reasonable technical and organizational measures appropriate to this service, including HTTPS transport, restricted browser permissions, security headers, limited D1 download fields, and user-agent hashing. No website, storage system, or transmission method can be guaranteed completely secure.

DeviantArt and other outbound links

Wallpaper Looma links to DeviantArt for the publisher profile, contact, and optional Premium Downloads. When you follow one of those links, your browser contacts DeviantArt and can send ordinary request data and a referrer. DeviantArt controls its account, message, checkout, payment, delivery, refund, and purchase-history data under the DeviantArt Privacy Policy. Wallpaper Looma does not receive your DeviantArt password or payment-card details merely because you follow or complete a purchase through that link.

Changes to this policy

We may revise this policy when the site, vendors, legal requirements, or data practices change. The effective date and version at the top identify the current text. A material change applies prospectively unless applicable law requires another approach.