Privacy Policy
Last updated: September 11, 2026
1. Who is responsible for your data
The data controller for wall1k.com is Oleksii Radetskyi, a self-employed professional (autónomo) established in Spain. Contact: wall@wall1k.com.
2. What we collect
When you submit an app to the Wall, we collect:
- App name, website URL, and tagline (optional)
- Your email address
- The icon image you upload
- Your IP address, collected transiently by Cloudflare Turnstile for bot verification
- The tier you chose and, for paid tiers, a payment/checkout reference (order ID, checkout ID) — no card details ever reach us; those are handled entirely by Creem, our payment processor
We don't require an account, a password, or any data beyond what's needed to review, publish, and manage your Spot.
3. Why we process it
- To review, approve or reject, and publish your Submission (contract performance, Art. 6(1)(b) GDPR)
- To email you about your Submission's status and send your manage link (contract performance)
- To process payment and refunds for paid tiers, via Creem (contract performance)
- To prevent spam, bot, and fraudulent submissions, via Cloudflare Turnstile (legitimate interest, Art. 6(1)(f) GDPR)
- To comply with legal obligations, where applicable
4. Who we share it with
Cloudflare, Inc. — hosting, database, file storage, image processing, Turnstile bot verification, and transactional email delivery. Cloudflare may process data outside the EEA; transfers rely on Cloudflare's Data Processing Addendum and Standard Contractual Clauses.
Creem — our payment processor and Merchant of Record. Creem receives your email and the amount charged, and directly handles your payment method, billing, VAT, and refunds. Creem's own privacy policy governs the data you give it at checkout.
Slack — when your Submission reaches the review queue, our internal team is notified in Slack with your app's name, tier, and your email address, so it can be moderated promptly. This is our own internal tooling, not a Slack integration you interact with directly.
We don't sell your data, and we don't use it for advertising or share it with data brokers.
5. What's public
If your Submission is approved, your app name, URL, tagline, icon, and Spot number are displayed publicly on the Wall and on your Spot page (wall1k.com/app/{slug}), and are included in the auto-generated share card image for that page. Your email address is never displayed publicly.
6. How long we keep it
Approved (active) Submissions are kept for as long as the Spot remains on the Wall.
Rejected, refunded, or never-completed Submissions are not published, but we don't currently delete them on a fixed schedule — they're kept until you ask us to remove them, or until we manually clear them. You can request erasure at any time; see Section 8.
7. Cookies
wall1k itself doesn't set advertising or analytics cookies. Cloudflare Turnstile, used to verify you're not a bot, may set its own cookies or local storage as part of that check. No cross-site tracking or ad cookies are used.
8. Your rights
Under GDPR, you have the right to access, rectify, erase, restrict, or object to the processing of your data, and to data portability. To exercise any of these, email wall@wall1k.com — mention the email address you used to submit, or your Spot's URL. You also have the right to lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos, or with your own country's supervisory authority if you're elsewhere in the EU.
9. Children
wall1k isn't directed at children, and we don't knowingly collect data from anyone under 16.
10. Changes
We may update this policy from time to time; the "Last updated" date above reflects the latest revision.