Privacy

Tinbo is run by Tinbo. This page explains what we store when you use the site, why, who else sees it, and how to have it removed. Questions or requests: [email protected].

What we store

• Your account: email address, username, display name and your password, which is stored only as a secure hash (we can't read it). If you sign in with Google or Apple instead, we get your name and email address from them (with Apple, possibly a private relay address that forwards to you) and store a link to that account, but no password.
• Your profile: bio and profile picture, if you add them, and your settings (such as whether to show NSFW or hide AI-generated wallpapers).
• What you upload: the image and the details you enter (title, tags, credits). We remove camera metadata such as GPS location from every upload before storing it.
• What you do on the site: likes, comments, collections, who you follow and reports you send.
• Technical data: your IP address and browser name are saved with each signed-in session, and IP addresses are used briefly to limit repeated sign-in attempts. To count each download once a day, and to limit how many new screen sizes or reports one visitor can ask for, we keep a scrambled, one-way fingerprint of your IP address (never the address itself) for up to two days. A report sent without an account is stored with what you wrote, not who sent it.
• Moderation records: decisions moderators make about content or accounts, and why.

Why we use it

• To run your account and the features you use (sharing, likes, comments, collections).
• To keep Tinbo safe: reviewing uploads, handling reports and copyright claims, and stopping spam and abuse.
• To send you emails: verifying your address, resetting your password, and telling you when a wallpaper you uploaded is published, declined or taken down (you can turn the last ones off in Settings).

We don't sell your data, show ads, or use advertising or tracking tools.

Visitor statistics

To see which pages people visit and roughly where they come from, we count visits with Umami, running on our own server. It records the page, the site that sent you, your browser, device type and country, and counts a few actions without saying who did them: downloads, sign-ups, uploads and searches that found nothing. Your IP address is used to look up the country and is then thrown away. Umami sets no cookies and can't follow you across other sites.

The iOS app

The Tinbo app for iPhone has no analytics or tracking. It fetches wallpapers from this site, and its requests are handled like any other visit. Signing in is optional and uses the same account as this site, with the same data as above; the app keeps its sign-in on your device (in the iOS Keychain) and nothing else about you. Saving a wallpaper asks only for permission to add photos, not to see your library, and uploading uses the system photo picker, which shares only the picture you choose.

Cookies

We set one cookie that keeps you signed in, and a second that remembers whether you last signed in with a password, Google or Apple, so the sign-in page can point it out. Both only work for this site, so there's no cookie banner. There are no advertising or tracking cookies.

Who else handles data

• Cloudflare delivers the site and images and protects it from attacks, so it sees your IP address and the pages you request.
• Resend sends our emails, so it receives your email address and the message.
• Google, only if you choose "Continue with Google": Google confirms who you are and tells us your name and email address. Google's own privacy policy covers what it does with that sign-in.
• Apple, only if you choose "Sign in with Apple": Apple confirms who you are and tells us your name (the first time) and an email address, which can be a private relay address. When you delete your account, we tell Apple to end that sign-in.

Everything else, including the database and all images, is stored on servers we run ourselves.

How long we keep it

• Your account and content: until you delete them.
• Uploads that were declined: 30 days after the decision. Uploads that failed or were never finished: up to 7 days. Wallpapers taken down by a moderator: the image files after 90 days.
• Signed-in sessions: until you sign out or they expire.
• Rate-limit and download counters: up to two days.
• Moderation records are kept to keep the site safe, but no longer point to you once your account is deleted. Fingerprints of images taken down for copyright are kept so they can't be uploaded again.

Deleting your account

You can delete your account at any time under Settings, or in the iOS app under You › Account. This immediately removes your account, your wallpapers and their files, your profile picture, comments, likes and collections.

Your rights

You can get a copy of the data we hold about you, including the original files you uploaded, from Settings → Download your data. You can also have it corrected (most of it you can edit yourself in Settings) or deleted, and object to how we use it. Contact [email protected]. If you're unhappy with how we handle your data, you can also complain to your local data protection authority.

Age

You need to be at least 13 to create an account, and at least 18 to turn on NSFW content.

Changes

If we change how we handle data, we'll update this page and the date at the top.