Privacy notice
Last updated 16 September 2026
The short version
- Your wall photo never leaves your device. Rendering runs in your browser or in the app. We do not upload, store or see it, unless a future feature asks you explicitly first.
- If you join the waitlist we store your email address, when you consented, where you signed up from, and your country (from your connection) - to send one launch email and to plan which markets to open first.
- This site uses Google Analytics, but only if you accept it. Decline and no analytics cookies are set. You can change your mind any time from the link in the footer.
- We never sell your data.
Who we are
Murello is operated from Malta (EU). We deliberately publish no email address here: plain addresses on public pages get harvested for spam. Use the contact form; it reaches us and sends you a confirmation.
What we collect and why
| Data | Why | Basis · retention |
|---|---|---|
| Waitlist email, consent time, signup source, country | One launch announcement; market planning | Consent · until launch email is sent, or until you unsubscribe |
| Google Analytics 4: pages viewed, approximate location from a truncated IP, device type, outbound link clicks | Understanding which pages work and which art people click | Consent · 14 months. Denied until you accept; declining means no analytics cookies at all |
| Outbound link clicks (which listing, when, device type) | Knowing which art people want to buy | Legitimate interest · 24 months |
Cookies
The site sets no cookies of its own. If you accept analytics, Google Analytics sets its own cookies (_ga and _ga_*) to tell repeat visits apart; they expire after two years. We run Google Consent Mode, so before you choose, and if you decline, those cookies are never written. We remember your choice in your browser's local storage under murello.consent - that never leaves your device. Google Signals and advertising features are switched off.
Third parties
Hosting and waitlist storage: Amazon Web Services, US East region - transfers out of the EU rely on AWS's standard contractual clauses and its EU-US Data Privacy Framework certification. Analytics: Google (Ireland and the United States), only with your consent. Store links go to Amazon, Etsy and Catawiki, whose own privacy policies apply once you leave this site. Some links may be affiliate links - see the affiliate disclosure.
Your rights
Under the GDPR you can ask what we hold about you, have it corrected or deleted, withdraw consent, withdraw consent (the cookie settings link in the footer), or complain to the Information and Data Protection Commissioner (Malta) or your local authority. Use the contact route described above and we will act within 30 days.