# Legal Documents — Quick Index

One-paragraph plain-language summary of every document under [`/legal/*`](https://wallper.app/legal). Source files: `src/app/legal/_data/*.ts`.

| Document          | URL                                                               | What it covers                                                                                                                                                                                                                                                                                                                                                                       |
| ----------------- | ----------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Terms of Service  | [/legal/terms](https://wallper.app/legal/terms)                   | The contract between you and Wallper: who can use the app (13+), what your $9.99 license lets you do (install on up to 3 personal Macs, no resale, no reverse engineering), the 14-day refund, what content you can upload, warranty disclaimers, limitation of liability, and that Ukrainian law governs (without removing your local consumer rights).                             |
| Privacy Policy    | [/legal/privacy](https://wallper.app/legal/privacy)               | What we collect (HWID, IP, device & OS info, Stripe transaction metadata, optional support contact, optional public uploads), what we use it for (license enforcement, fraud, app improvement), and what we don't do (no profiling, no ad targeting, no selling data). Includes GDPR + CCPA rights and a list of where data lives (OVH EU dedicated server, Stripe, Resend, Vercel). |
| Cookie Policy     | [/legal/cookie](https://wallper.app/legal/cookie)                 | Strictly necessary cookies (Stripe, session, license, anti-fraud fingerprint), optional analytics cookies (Google Analytics, only after consent), the consent banner mechanism, and how to withdraw or change consent.                                                                                                                                                               |
| Refund Policy     | [/legal/refund](https://wallper.app/legal/refund)                 | 14-day money-back guarantee, no justification needed. Refunds go back to the original payment method via Stripe (3–10 business days), with no handling fees. Lists exclusions (after 14 days, abuse, fraud) and preserves your statutory rights.                                                                                                                                     |
| Subprocessors     | [/legal/subprocessors](https://wallper.app/legal/subprocessors)   | Third parties that process Wallper data on our behalf: OVH (EU dedicated server), Stripe, Vercel, Resend, Google. All bound by DPAs and/or SCCs; data transfers outside the EEA use SCCs / EU–U.S. Data Privacy Framework where applicable.                                                                                                                                          |
| Acceptable Use    | [/legal/acceptable-use](https://wallper.app/legal/acceptable-use) | What you can't do with Wallper or its public gallery: no unlawful, abusive, infringing, sexual, hateful, or harmful content; no scraping, reverse engineering, license sharing, or attempts to disrupt the service.                                                                                                                                                                  |
| DMCA / Copyright  | [/legal/dmca](https://wallper.app/legal/dmca)                     | How copyright owners can submit a takedown notice for infringing wallpapers in the public gallery, and how users can submit a counter-notice if they believe a takedown was incorrect.                                                                                                                                                                                               |
| GDPR Notice       | [/legal/gdpr](https://wallper.app/legal/gdpr)                     | Specifically for EEA / UK / Switzerland users: the personal data we process, our legal bases (contract, legitimate interest, consent, legal obligation), your rights under Articles 15–22, international transfer safeguards (SCCs, UK IDTA, EU–U.S. DPF), retention windows, and how to file a request or complaint.                                                                |
| Security Overview | [/legal/security](https://wallper.app/legal/security)             | Technical & organizational security: OVH EU dedicated server, TLS in transit, encryption at rest, least-privilege access, MFA on admin accounts, monitoring, incident response, vulnerability disclosure (security@-style report to support@wallper.app), and the user's shared-responsibility part.                                                                                 |

## Cross-document conventions

- **One copyright line:** "Copyright © 2025 Wallper. All rights reserved. Contact: support@wallper.app. Website: wallper.app." appears at the bottom of every doc as the **Feedback & Information** section.
- **Single contact:** all legal correspondence (refunds, GDPR/CCPA requests, DMCA notices, security reports) goes to **support@wallper.app**.
- **Governing law:** Ukraine, without limiting mandatory consumer rights in your jurisdiction.
- **Data residency:** the Wallper backend and wallpaper storage live on a **Wallper-controlled dedicated server hosted with OVH in the EU**. Other subprocessor entities (Stripe, Resend, Vercel, Google) may be US-incorporated, but Wallper-operated data sits in the EU.
- **Effective dates** on each document reflect the last revision; older versions are not retained on-site.