-
Notifications
You must be signed in to change notification settings - Fork 311
/
privacy-policy.txt
404 lines (329 loc) · 22.1 KB
/
privacy-policy.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
Tumblr, Inc. ("Tumblr," "we," "us," or "our") takes the private nature of your
information very seriously. Note that Tumblr was acquired by, and is now, a
wholly-owned subsidiary of, Yahoo! Inc. ("Yahoo") as of June 19, 2013. This
policy regarding our privacy practices (the "Privacy Policy") describes how we
treat the information we collect when you visit and use tumblr.com (the "Site")
and/or Tumblr's other domains, products, advertising products, services, and/or
content, including our iOS, Android, and Windows Phone mobile applications
(collectively with the Site, the "Services"). When you use the Services, you
also consent to the collection, transfer, manipulation, storage, disclosure and
other uses of your information as described in this Privacy Policy; please read
it carefully.
What This Privacy Policy Covers
This Privacy Policy covers our treatment of information gathered when you
are using or accessing the Services. This Privacy Policy also covers our
treatment of any information about you that our partners share with us or
that we share with our partners.
This Privacy Policy does not apply to the practices of third parties that we
do not own or control, including but not limited to any third party
websites, services and applications ("Third Party Services") that you elect
to access through the Service or to individuals that we don't manage or
employ. While we try to facilitate access only to those Third Party Services
that share our respect for your privacy, we don't take responsibility for
the content or privacy policies of those Third Party Services. We encourage
you to carefully review the privacy policies of all Third Party Services you
access.
Also: This Privacy Policy also doesn't govern what our users do on their
Tumblr blogs and we aren't responsible for the information collection and use
practices of our individual blogs and bloggers. One of the great features of
Tumblr's products is customizability, and bloggers have a lot of flexibility
in how their blogs behave. When you visit a blog in our network, that blog
may collect more information than we do, and may provide information to third
parties that we have no relationship with, including to advertisers.
What We Collect and How We Use It
Account Information:
When you create an account on the Services (an "Account"), we'll ask you
for information such as your username, password, age, and email address
("Account Information"). You may also be required to provide us with your
birthdate, which we use to verify your age and may use to personalize the
Services for you (e.g., by presenting you with content relevant to your age
group). This information may personally identify you. For example, if you
use your full name as your username, you are disclosing your identity to
the public. We also allow users to look for their friends by email address;
you can, however, opt out of email lookup through your Account Settings.
Email Communications with Us:
As part of the Services, you may occasionally receive email and other
communications from us. Administrative communications relating to your
Account (e.g., for purposes of Account recovery or password reset) are
considered part of the Services and your Account, which you may not be able
to opt-out from receiving. We also may send you other kinds of emails,
which you can opt-out of either from your Account Settings page or by using
the "Opt-Out" link in the emails themselves. Note that we will never email
you to ask for your password or other Account Information; if you receive
such an email, please forward it to us.
Information about Your Accounts on Third Party Services:
You can link your Account to certain Third Party Services. In order to do
so, you may provide us with your username or other user ID for a Third
Party Service, and you may then be required to log into that Service. After
you complete this login process, we will receive a token that allows us to
access your account on that service so that we can, for example, post your
content to that service when you ask us to. We do not receive or store your
passwords for your Third Party Service accounts.
Information Obtained from Third Party Services:
In some cases, when you connect your Account with your accounts on Third
Party Services, we may obtain information about you from those Third Party
Services. Such information could include, for example, your gender, if you
have disclosed that information to that third party and made it available
for Tumblr to access. To the extent we obtain such information, we may use
the information about you that we receive from Third Party Services to
improve and personalize the Services. As a general practice, we strongly
urge you to make careful judgments about any personal information you
disclose to Internet services, including Tumblr and linked Third Party
Services, regardless of whether you choose to link your accounts together.
User Content:
By default, all sharing through the Services is public, and when you
provide us with content it is published so that anyone can view it.
Although we do provide tools, like password-protected blogs, "Asks," and
"Fan Mail," that let you publish content privately, you should assume that
anything you publish is publicly accessible unless you have explicitly
selected otherwise. Content published and shared publicly is accessible to
everyone, including search engines, and you may lose any privacy rights you
might have regarding that content. In addition, information shared publicly
may be copied and shared throughout the Internet, including through actions
or features native to the Services, such as "reblogging."
Information About User Content:
In some cases, we may collect information about content you provide to the
Services. For example, when it's included as part of your images, we may
collect information describing your camera, camera settings, or EXIF
information. This information allows us to improve the Services and provide
additional features and functionality.
Financial Information:
We will sometimes collect financial information, such as information
related to your payment method (valid credit card number, type, expiration
date or other financial information). This happens, when you decide to
purchase a paid Service. We do not, however, store that financial
information; such information is stored by our payment processor (the
"Payment Processor"), and use and storage of that information is governed
by the Payment Processor's applicable terms of service and privacy policy
(the Payment Processor may also have other terms, and you are responsible
for locating and familiarizing yourself with those terms, as applicable).
We do receive certain information from our Payment Processor: (1) a unique
token that we connect with your Account to enable you to make further
purchases using the information stored by our Payment Processor and (2) in
certain cases, the last four digits of the credit card number associated
with that token, so that we can prevent fraudulent transactions and
identity theft.
Information Related to Use of the Services:
We collect information about how people use the Services, including those
with an Account. This information includes general usage information, and
may include information such as the number and frequency of our visitors,
which pages or features of the Services they have visited, which links on
the Services they have clicked on, and the length of those visits. We may
also use third party applications and services, such as Google Analytics
and Quantcast, to collect and analyze this information. This information
enables us and third parties authorized by us to figure out how often
individuals use the Services so that we can analyze and improve them. Some
of this information may be associated with the IP Address (as defined
below) used to access the Services, and some may be associated with your
Account, such as the topics you search for and the help pages that you
visit. We may also use some of this information in aggregate form, that
is, as a statistical measure related to all of our users that would not
identify you personally. We use information about your use of the Services
to improve and enhance your experience on the Services.
Information Related to Your Web Browser:
We automatically receive and record information from your web browser when
you interact with the Services, such as your browser type and version,
what sort of device you are using, your operating system and version, your
language preference, the website or service that referred you to the
Services, the date and time of each request you make to the Services, your
screen display information, and information from any cookies we have placed
on your web browser (as described below). We also sometimes detect whether
you are using certain web browser extensions and store that information in
a manner associated with your Account. We use web browser-related
information to enhance and improve the Services.
IP Address Information:
Under certain circumstances, such as when you log into the Services, load
a web page from the Services, or send an "Ask" message anonymously, we may
collect and store your Internet Protocol Address ("IP Address"). We
generally use IP Address information to fight spam, malware, and identity
theft; we also may use it, in the future, to personalize the Services for
you. IP Address information is also used by us to generate aggregate,
non-identifying, information about use of the Services.
Location Information:
In some cases we collect and store information about where you are
located, such as by converting your IP Address into a rough geolocation.
We may use location information to improve and personalize the Services
for you.
Information Related to Your Mobile Device:
We may collect and store information related to your mobile device, such
as your phone number. You will have a choice as to whether we collect and
store this information. We may use this information to improve the
Services, such as by allowing you to verify your account by text message.
Information Collected Using Cookies:
Cookies are pieces of text that may be sent to and saved by your web
browser when you access a website; your web browser stores these cookies
in a way associated with each website you visit, and you can see your
cookies through your browser settings. We use cookies to enable our
servers to recognize your web browser and tell us how and when you use the
Services. Our cookies do not, by themselves, contain information that
personally identifies you, and we don't combine the general information
collected through cookies with other such information to tell us who you
are. However, we do use cookies to identify that you have logged in and
that your web browser has accessed aspects of the Services, and we may
associate that information with your Account if you have one. This
information, in turn, is sometimes used to personalize your experiences on
the Services, such as by presenting you with a different iFrame (allowing
you to follow a blog) when you are logged in and visit a blog hosted by
Tumblr. Most web browsers have an option for turning off the cookie
feature, which will prevent your browser from accepting new cookies, as
well as (depending on the sophistication of your web browser software)
allowing you to decide on acceptance of each new cookie in a variety of
ways. If you disable cookies, you won't be able to log into your Account,
and so will not be able to use the vast majority of our Services; as such,
we don't recommend disabling your cookies when using the Services. Some
third-party services that we use, such as Google Analytics and Quantcast,
may also place their own cookies on your browser, and individual blogs on
our network may contain code that places their own cookies. Note that this
Privacy Policy covers our use of cookies only and does not cover the use
of cookies by third parties.
Information About Your Contacts:
Certain features of the Services allow you to provide us with your contact
lists, so that we can connect you with people in our Services that are also
on those contact lists. For example, you can temporarily connect your email
contact information to your Account, so that we can provide you with a list
of your email contacts that use the Services. As another example, you can
send us your mobile phone contact information through our mobile
applications, which then allows us to provide you with a list of those
contacts that use the Service so that you can "follow" their blogs. We will
give you a choice as to whether or not you provide us such information, and
we will disclose fully, within the appropriate feature, how we use that
information.
Derived Information:
As described above in "Native Actions" and "Information Related to the Use
of the Services," we analyze your actions on the Services in order to
derive or infer characteristics that may be descriptive of your Account
(for example, what kinds of blogs you follow or what kind of posts you
view, "like", and reblog). We use this information for all of the purposes
set forth in "Information Related to Use of the Services," above.
Email Tracking:
We may place information in our emails to you (such as a web beacon) that
allows us to measure our email deliverability.
With Whom Your Information Is Shared
We never share information we receive from you unless:
(a) we have your permission to share that information;
(b) we have given you prior notice that the information will be shared,
and with whom; or
(c) that information is aggregate information or other information that
does not identify you.
Information Shared with and Received from our Corporate Parent:
We are a wholly-owned subsidiary of Yahoo, and, as such, Yahoo may receive
any information we do, and may share information it has with us. Yahoo may
use the information it receives from us to help us provide, understand, and
improve the Services (including by providing us analytics) and in
connection with Yahoo's products and services (including by providing you
with a more personalized experience). For details about how Yahoo treats
the information it collects, please review Yahoo's Privacy Policy.
Information Shared with the Public Through the Services:
As noted in "User Content" and "Native Actions," above, by default, content
published through the Services and many actions you take on the Services
are shared with the public. Because this kind of information can be seen by
anyone and may be indexed by search engines (like Google Search, or the far
superior Yahoo Search), you should be careful about what you choose to
disclose publicly and make sure it's information you want to share with
everyone.
Information Shared Between the Services:
We may, if possible, aggregate information about your use of multiple
Services and use that consolidated information to enhance and improve the
Services, and to develop new Services.
Information You Share with Third Party Services:
You may access Third Party Services through the Services, for example by
clicking on externally-pointing links. You may also choose to share
information that you provide to us, like blog posts, with those Third
Party Services (for example, by sharing posts to Twitter or Facebook).
This Privacy Policy only governs information we collect and you are
responsible for reading and understanding those Third Party Services'
privacy policies.
Information Shared with Our Agents in Order to Operate and Improve the
Services:
In some cases, we share information that we store (such as IP Addresses)
with third parties, such as service providers, consultants, and other
agents ("Agents"), for the purposes of operating, enhancing, and improving
the Services, and developing new products and services. For example, we may
share information with service providers in order to fight spam, and
third-party consultants may have access to information in the process of
improving our processes and technology. Agents with whom we share such
information for these reasons are generally bound by confidentiality
obligations and, unless we tell you differently, our Agents do not have any
right to use information we share with them beyond the scope and duration
of what is necessary to assist us.
Information Shared with Third Parties:
We may share or disclose non-private information, Aggregate Information,
or other non-Personal Information with people and entities that we do
business with.
Information Disclosed Pursuant to Business Transfers:
In some cases, we may choose to buy or sell business assets. In these
transactions, user information is typically one of the transferred
business assets. Moreover, if we, or substantially all of our assets, were
acquired, or if we go out of business or enter bankruptcy, user
information would be one of the assets that is transferred or acquired by
a third party. You acknowledge that such transfers may occur, and that any
acquirer of us or our assets may continue to use your Personal Information
as set forth in this policy.
Information Disclosed for Our Protection and the Protection of Others:
We believe in freedom of expression, and, to the extent reasonable, we try
to protect our community from baseless legal demands. That said, we also
reserve the right to access, preserve, and disclose any information as we
reasonably believe is necessary, in our sole discretion, to (i) satisfy
any law, regulation, legal process, governmental request, or governmental
order, (ii) enforce this Privacy Policy and our Terms of Service,
including investigation of potential violations hereof, (iii) detect,
prevent, or otherwise address fraud, security, trust and safety, or
technical issues (including exchanging information with other companies and
organizations for the purposes of improving security and preventing fraud,
spam, and malware), (iv) respond to user support requests, or (v) protect
the rights, property, health or safety of us, our users, any third parties
or the public in general, including but not limited to situations involving
possible violence, suicide, or self-harm.
Information We Share with Your Consent or at Your Request:
If you ask us to release information that we have about your Account, we
will do so if reasonable and not unduly burdensome.
The Security of Your Information
Your Account Information is protected by a password for your privacy and
security. We may enable additional security features in the future, like
multi-factor authentication. You need to prevent unauthorized access to your
Account and information by creating a unique, secure, and protected password
and limiting access to your computer and browser by signing off after you
have finished accessing your Account on the Services.
We seek to protect your information (including your Account Information) to
ensure that it is kept private; however, we can't guarantee the security of
any information. Unauthorized entry or use, hardware or software failure,
and other factors, may compromise the security of user information at any
time.
What Information You Can Access
If you are a registered user, you can access most information associated with
your Account by logging into the Services and checking your Account Settings
page. Registered and unregistered users can access and delete cookies through
their web browser settings.
Your California Privacy Rights: Under California Civil Code sections
1798.83-1798.84, California residents are entitled to ask us for a notice
identifying the categories of personal customer information that we share
with our affiliates and/or third parties for marketing purposes, and
providing contact information for such affiliates and/or third parties. If
you are a California resident and would like a copy of this notice, please
submit a written request to the following address: 35 East 21st Street, 6th
Floor, New York NY 10010.
How to Delete Your Account and What Happens When You Delete Your Account
If you want to delete your Account, you can do so from your Account Settings
page or by emailing us and providing proof of authority over the Account.
What constitutes "proof of authority" will vary depending on the
circumstances, but generally will require sufficient identifying information
so that we can be confident you are the Account owner. Deleting your Account
may not fully remove the content you have published from our systems, as
caching of, backups of, copies of, or references to your Account Information
may not be immediately removed. In addition, given the nature of sharing on
the Services, some of the public activity on your Account prior to deletion
(such as reblogs of your blog posts) may remain stored on our servers and
accessible to the public.
Changes to This Privacy Policy
We may amend this Privacy Policy from time to time, using the process for
modifications set forth in our Terms of Service. Use of information we
collect is subject to the Privacy Policy in effect at the time such
information is collected.
Where to Direct Questions or Concerns
If you have any questions or concerns regarding privacy using the Services,
please send us a detailed message.
Link to Prior Versions
You will find a link to prior versions of our Privacy Policy below. We have
stored these versions on GitHub, which will also allow you to compare
different versions and see what terms have changed:
http://github.com/tumblr/policy/commits/master/privacy-policy.txt