Privacy Policy

Last updated 2026-09-15. TinyWhim is run by the operator of tinywhim.com, who decides how the information described here is used. Write to us at support@tinywhim.com.

What we hold

• Your account. Your email address, the display name and bio you choose, and the profile picture from Google if you sign in with Google. Also the date you confirmed you are 18 and accepted the terms.
• What you post. Whims, photos, videos, titles and descriptions, comments, likes and saves, and who you follow.
• Messages. The direct messages you send and receive, so we can deliver them and look at them if someone reports a conversation.
• Reports and moderation. What was reported, why, a copy of the reported text at the time, and what we did about it.
• Technical records. Our hosting providers keep short-lived request logs with IP addresses. We do not run advertising or tracking cookies; the only cookie is the one that keeps you signed in.

Why we hold it

To run the service you asked for: to sign you in, to show your posts to other people, to deliver your messages, and to answer reports. Under the GDPR that is performance of our contract with you, and our legitimate interest in keeping the service safe. Where the law requires your consent, we ask for it.

Where it is stored

TinyWhim runs outside mainland China. Your information is stored and processed on servers in the United States and on Cloudflare’s global network. If you are in mainland China, using TinyWhim means your information leaves the country; by signing in you agree to that transfer. The companies that process data for us are:

• Vercel — hosting the website (United States).
• Neon — the database (United States).
• Cloudflare — storing and serving posted files, and bot protection.
• Resend — sending sign-in codes by email.
• Google — only if you choose to sign in with Google.

Profile pictures from Google are loaded from Google’s servers when someone views your profile, which means Google sees that request.

Who can see what

Your display name, bio, picture and posts are public. Your email address is not shown to anyone. Direct messages are visible to you, the person you are writing to, and to us if a conversation is reported.

How long we keep it

Your account and posts stay until you delete them. When you delete your account, your posts go offline the same day and after 30 days we delete your account details, your posts and the files behind them. What stays: messages you already sent, in the other person’s inbox; your comments and follows, no longer showing your name; and our moderation records, with your identity replaced by an anonymous marker, so that deleting an account cannot erase a report about it.

Your rights

You can see and change your display name and bio in Settings, and delete your account there too. Write to support@tinywhim.com to ask for a copy of what we hold about you, to correct it, to object to how we use it, or to complain. We answer within 30 days. If you are in the EU or the UK you can also complain to your data protection authority.

Children

TinyWhim is for people 18 and over. We do not knowingly collect information from children. If you believe a child is using TinyWhim, tell us and we will close the account.

Changes

If we change this policy in a way that matters, we ask you to agree again the next time you sign in. The Terms explain the rest of the agreement.