Privacy Policy

What we hold

• From GitHub or Google when you sign in: your account id there, your email address if it is verified, your name and your picture.
• The name apps see and the handle friends add you by, which you choose.
• Your library, your votes, your friends and the apps you send them.
• What you save in each app. What you save in a private app is encrypted with your passkey before it leaves your device, and we cannot read it.
• Your passkeys’ public halves, and the devices and computers you have signed in on.
• Where to send your notifications, for each browser you turn them on in.
• Whether you asked for news by email, and when.
• If you publish: your publisher name, your apps, and the notes you leave on each publish.
• If you subscribe: which plan you are on and when it renews. Stripe holds your card details, and we never see them.

Before you sign in, Tinylib gives your browser an account of its own so apps can save what you do. When you sign in, it joins your account. One that is not used for a while is deleted.

Why we hold it

To run Tinylib: to sign you in, keep your data on every device, show your library, connect you with friends, deliver notifications, and let developers publish. We write to your email address to answer you, and with news about Tinylib only if you ask for it. We do not sell your information or use it for advertising.

What apps receive

An app receives the name apps see and what you save in it. It does not receive your email address, your handle, your picture or anything from another app. Friends who have the same app can see what that app shares with friends, which the app says on its page.

Cookies

Tinylib sets one cookie that keeps you signed in, and uses your browser to keep your apps and their data on your device for offline use. There are no advertising or tracking cookies.

Who else handles it

• Cloudflare runs our servers and keeps our data.
• GitHub and Google sign you in.
• Stripe takes payments for subscriptions.
• Resend sends our email.
• Your browser’s push service delivers notifications.

Your choices

You can change your name and handle, disconnect a sign-in method, remove a passkey, turn off notifications and turn off news emails in Account. To get a copy of what we hold about you, or to delete your account and everything in it, write to legal@tinylib.app from the address on your account.

Signing out removes your apps and data from that device. They stay on your account.

How long we keep it

We keep your account for as long as it exists. When you delete it, we delete what it holds, apart from what the law requires us to keep, such as payment records.

Children

Tinylib is not meant for children under 13, and we do not knowingly hold information about them.

Changes

When this policy changes, the date at the top changes and Tinylib asks you to agree to the new version.

Contact

Questions about your privacy go to legal@tinylib.app.