1. What we collect, and why
- Your email address — only if you create an account. We use it for sign-in links and, rarely, to tell you something important about your sites (like the shutdown notice we promise in our terms). Never for marketing lists we didn't ask you about, never given to advertisers.
- Your sites — the photos, stories, titles, and links you upload. That's the product; we store it so we can show it to the people you share it with.
- Payment records — if you buy Keep-it-forever, Stripe processes the payment and we store a record that the site is paid. We never see or store your card number.
- Basic technical data — IP addresses appear in short-lived infrastructure logs and are used for rate limiting (for example, capping sign-in emails per day) to prevent abuse. We don't build profiles from them.
- Simple tallies — we count how many times a page was viewed and how many times the "Create your own" button was tapped, so we know whether people like what they see. These are counts and nothing else: a number per day, with no IP address, no cookie, no visitor ID, and no way to tie any of it back to a person. Nobody is followed around.
That's the whole list. No ad IDs, no cross-site tracking, no fingerprinting, no analytics scripts on your published sites.
2. Cookies and local storage
If you sign in, we set one cookie: your session, so you stay signed in. That's the only cookie we set, which is why there's no cookie banner. While you're building a site, your draft is saved in your own browser's local storage — it stays on your device unless you publish.
3. Who touches your data
We run tīlen on a small number of service providers, each with a specific job:
- Cloudflare — hosts the service and stores your sites and photos (servers primarily in the US).
- Resend — delivers sign-in emails to you.
- Stripe — processes payments.
Each receives only what its job requires. We don't sell, rent, or trade your data with anyone. We'd disclose data only if legally compelled to (a valid court order), and it's a short list to disclose.
4. Who can see your sites
Published sites live at private, unlisted links. We send search engines a "do not index" signal on every published site and photo. But a link is a key: anyone you give it to can view the site and pass the link along. Share accordingly.
5. How long we keep things
- Temporary (free) sites — deleted automatically after they expire, photos included. Permanently.
- Paid sites — kept as long as tīlen operates, per our terms, or until you delete them.
- Deleted sites — when you delete a site, its files are removed from our servers permanently. We can't undelete.
- Accounts — kept until you ask us to delete yours.
6. Your rights
Email admin@tilen.app to ask what we have about you, to correct your email address, or to delete your account and everything in it. We'll act on deletion requests promptly — usually within days, not months. Depending on where you live (the EU, California, elsewhere), you may have formal legal versions of these rights; our answer is the same either way: it's your data, ask and we'll handle it.
7. Kids
You must be 13 or older to use tīlen. Photos of your kids on a site you build are your call and your responsibility as their parent or guardian — see our terms about having permission from people in your photos.
8. Changes
If this policy changes in any meaningful way, we'll post the new version here with a new effective date and, if you have an account, make reasonable efforts to let you know. We won't quietly get worse.
9. Contact
admin@tilen.app — a real person reads it.