Privacy

What we keep. Your email address and name from sign-in; the settings of your wall (its address, timezone, location for weather, layout and colours); the photos you upload and the framing decisions you make; the address of any calendar feed you paste; and, if you connect Google Calendar, a token that lets the wall read the calendars you choose and add the events people enter on it. Weather comes from Open-Meteo using your chosen location only.

Google user data

Signing in with Google shares your name, email address and Google account id with us. We use them to create and recognise your account, and for nothing else.

Connecting Google Calendar asks Google for two permissions: to see the list of calendars in your account, and to view and add events on them. With them we read the names and colours of your calendars, so you can choose which ones your wall shows and which one new events go into; we read the title, time, all-day flag and place of events on the calendars you chose, from about six weeks ago to about ten weeks ahead, to show them on your wall; and we create the events you add on the wall, in the calendar you picked. We never change or delete events, and we never read events from calendars you did not choose.

How Google data is stored. The token Google gives us, and a copy of the events your wall shows, are kept with your wall on Cloudflare's servers, encrypted at rest, and refreshed every few minutes while the wall is in use. Only the wall and the screens you pair with it can see those events.

Sharing. We do not sell Google user data, share it with anyone, use it for advertising, or use it to train AI models. No person at Hestia reads it, except with your permission to help you, or where the law or keeping the service secure requires it.

Removing access. Settings → Calendars → Disconnect revokes the token at Google and deletes the copied events straight away. You can also remove Hestia under Third-party connections in your Google Account. Deleting your account removes everything.

Limited Use. Hestia's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Everything else

iCloud shared albums. If you paste a shared album link, we read that album through Apple's public album endpoints and show its photos on your wall. Keep the link private: anyone who has it can see the album.

Who can see your wall. Only you, screens you pair with a display link, and anyone you give that link to; a wall is private unless you make it public in Settings.

Payments. Subscriptions are handled by Stripe. Your card details go to Stripe on its own checkout page and never reach us; we keep the Stripe customer and subscription ids, the plan, its status and when it renews, so the wall knows whether to show.

Deleting. Settings → Account cancels your subscription and deletes your wall, its photos, its settings and tokens, and your account, right away.

Cookies. One signed cookie keeps you signed in and one keeps a paired screen on its wall. No tracking, no advertising, no third-party analytics; we count daily totals (sign-ups, wall views) without identifying anyone.

Contact. Use the support email shown on Google's permission screen for Hestia.

Last updated October 23, 2026.