← tttttttumblr

Privacy Policy

Last updated: April 2026

TL;DR — The short version

1. Who We Are

tttttttumblr is an independent service operated by an individual developer based in Canada. This policy explains what data we collect, how we use it, and how you can control it. We are subject to Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

2. What We Collect

When you connect your Tumblr account, we collect and store:

We do not collect your Tumblr password, payment card details, or any data beyond what is necessary to provide the service.

3. How We Use Your Data

Your data is used solely to provide tttttttumblr's features to you. Specifically:

We never sell, share, or display your personal data to any third party. Your archive is private and visible only to you.

The developer cannot see your data. tttttttumblr is architected so that your likes, posts, folders, and following list are only accessible using your own login session. There is no admin view, no dashboard, and no way for the developer to browse or read your personal archive. The only exception would be anonymised, aggregated statistics (such as total number of users) which contain no personal information.

Data separation by design. This is a deliberate architectural decision, not just a policy statement. The operator (Joseph) has no personal access to individual user data. The database is accessed automatically by the application through code only — not through any admin panel, manual lookup, or direct query tool. Any metrics or analytics available to the operator are aggregated only: totals, averages, and trends across all users. No individual user's records are ever visible at the operator level.

Following list data contributed to the Dormant Blog Index feature (if and when enabled) is aggregated across all users and processed at a collective level only. It is never viewable, queryable, or retrievable at an individual user level by the operator. Only the resulting anonymised aggregate — which Tumblr blog names appear most commonly across following lists — is used, and blog names are already public information on Tumblr.

4. The Dormant Blog Index

tttttttumblr may in future aggregate anonymised data about which Tumblr blogs appear in users' following lists, to build a shared index of dormant blogs for discovery purposes. If implemented, this will involve only blog names (which are already public on Tumblr) and will never include any information that identifies you personally or links any data back to your account. You will be notified before this feature is enabled and given the option to opt out.

5. Data Storage and Security

Your data is stored on secure servers. OAuth tokens are stored in an encrypted session store. We take reasonable technical measures to protect your data, but no system is completely secure and we cannot guarantee absolute security.

tttttttumblr is currently hosted on Replit infrastructure. We intend to migrate to dedicated hosting in the future.

6. Third-Party Services

tttttttumblr uses the following third-party services:

7. Your Rights (PIPEDA)

Under Canadian privacy law, you have the right to:

To exercise any of these rights, email us at hello@tttttttumblr.com. We will respond within 30 days. You can also delete your account directly from the Settings page within the app.

8. Data Retention

We retain your data for as long as your account is active. If you delete your account, all associated data is permanently deleted from our database within 30 days. OAuth tokens are invalidated immediately on logout or account deletion.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email where possible. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

Privacy questions or requests: hello@tttttttumblr.com