Privacy Policy

Last updated: 24 October 2026

Tinymo is run by Dream Talkies, based in Sri Lanka. We are responsible for the personal data described here. Contact us about it at hello@tinymo.app.

The short version

Our web tools run entirely in your browser. Text, files, tokens or data you paste into a tool are processed on your device and are never sent to our servers. We show ads from Google to keep the tools free, and Google may use cookies to do that.

Information we collect

• Tool input: none. It stays in your browser.
• Preferences, your Arcade Pass and desk apps: your light/dark theme choice, your XP, level, badges and quest progress, and what you make in our browser apps (Desk Notes, Desk Moments, Pet Studio and the games) are saved in your browser's local storage. They never leave your device, and clearing your browser's site data (or Reset my progress) removes them.
• Visit counts: we count how many times each page is viewed and how often tools are used, per day, and where visits came from (the campaign name in a link we shared, or just the name of the site that linked to us, such as google.com). We don't use cookies for this, don't store IP addresses, full referring addresses or any visitor id, and skip browsers that send Do Not Track or Global Privacy Control. The counts can't identify you.
• Server logs: our hosting provider, Cloudflare, keeps standard request logs (IP address, browser, page visited) for a short time for security and reliability, and may set strictly necessary security cookies to block bots.
• Email and enquiries: if you contact us, we keep your message so we can reply.

Enquiries

When you send an enquiry (custom software, buying a project, or joining the seller waitlist), we store your name, email, company and message so we can reply. We keep enquiries for up to 24 months and never sell or share them. Ask us any time to delete yours.

Orders and accounts

When you buy something we keep your email address, what you bought, the price and the payment status, so we can deliver it, send receipts and meet tax rules. Card payments are processed by Stripe under its own privacy policy; we never receive your card number. If you create an account we also keep your name and a scrambled (hashed) version of your password — never the password itself — and a sign-in cookie that lasts up to 30 days. You can ask us to delete your account at any time; we keep order records only as long as the law requires.

Sellers

If you sell on Tinymo we also keep your seller profile (display name, bio, links and payout email), your listings and uploaded files, and your sales and payouts, so we can show your listings, pay you and keep accounting records. Your display name, bio and listings are public; your payout email is not.

Why we use your data

• To give you what you asked for (a contract): replying to enquiries, delivering purchases, running your account and paying sellers.
• Legal duties: keeping order and payout records for tax and accounting.
• Legitimate interests: keeping the site secure and counting visits without identifying anyone.
• Your consent: personalised ads where the law requires consent. You can withdraw it at any time.

How long we keep it

Enquiries: up to 24 months. Accounts: until you ask us to delete them. Order, sale and payout records: as long as tax law requires (usually up to 7 years). Daily visit counts contain no personal data and may be kept longer.

Who handles data for us

We use a small number of service providers. Each only gets what it needs to do its job:

• Cloudflare hosts the site and stores enquiries, orders, accounts and uploaded files (its servers are in many countries).
• Resend sends our emails, such as enquiry replies, receipts and password resets.
• Google shows the ads (AdSense), as explained below.
• Stripe processes card payments, when online checkout is switched on.

These providers may store data outside your country, including in the United States and the European Union. We only use providers that protect it with contracts and safeguards required by data protection law (such as the EU Standard Contractual Clauses). Data is sent over encrypted connections, and only we can sign in to the admin.

Advertising and cookies

We use Google AdSense to show advertisements. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the internet.

• You can opt out of personalised advertising in Google Ads Settings.
• You can opt out of other vendors' use of cookies at aboutads.info.
• Learn more about how Google uses data from sites that use its services.

Visitors in the European Economic Area, the UK and Switzerland are shown a consent message before personalised ads are served, and can change their choice at any time.

Children

This site is not directed at children under 13, and we do not knowingly collect their personal information.

Your rights

Depending on where you live (for example under Sri Lanka's Personal Data Protection Act, the EU and UK GDPR, or US state privacy laws), you may have the right to access, correct, delete or get a copy of personal data we hold about you, to object to or limit how we use it, and to withdraw consent. We do not sell or share personal data for cross-context advertising other than through Google's ads described above. Emailhello@tinymo.app and we will reply within 30 days. If you are not happy with our answer, you can complain to your local data protection authority (in Sri Lanka, the Data Protection Authority).

Changes

If we change this policy, we will update the date at the top of this page.