← Back to TINFLE
Tinfle

Privacy Policy

Last updated: October 25, 2026

1. Who We Are

TINFLE is operated by TINFLE Inc., a C Corporation incorporated in the State of Delaware. This policy explains what information we collect, how we use it, and the choices you have. Questions? Reach us at support@tinfle.com.

2. Information We Collect

Account information. Your email address, username, and date of birth (used once to confirm you are at least 13). Your password is stored only as a salted hash. We never store it in plain text.

Content you create. Videos you upload or import, thumbnails, comments, live chat messages, direct messages, and recordings of your live shows when you turn recording on.

Guest information. If you join a private party with a guest pass, we store only the display name you enter. If you use the "Watch This" demo, we store the email address you provide so we can tell you when your friend is ready. You can check "Don't keep my email" and we will erase it when the link ends.

Purchase information. If you buy a Tinfle or join the membership, we store what you bought, the amount and date, the recipient name and personal message you write for the card, and Stripe's transaction identifiers so we can find your payment if you need help. For the membership we also store its status and renewal dates, so Your Tinfles can show them. We never see or store your card number: payment details go directly to Stripe, our payment processor, which keeps your card on file for membership renewals. When you send a Tinfle or start the membership, your first name as you typed it on your Tinfle and the approximate city of your connection may appear on our homepage and pricing page for up to 24 hours ("Rudy just sent a Tinfle · Austin, TX", "Rudy just started a monthly membership"). Your name is already part of your Tinfle; the city is kept in memory only and never stored. The video, the title, who it was for and what you paid never appear.

Card recipients and reaction recordings. Someone who opens a card does not need an account. We record when a card is opened and watched, so the sender knows it arrived. We also keep, with no account attached, whether the camera was turned on, how the send decision ended, and the general type of browser used (for example iPhone Safari, never the full browser details), so we can check that reviewing a clip works on every kind of phone. If the recipient chooses to turn their camera on, their reaction is recorded on their own device while they watch, and it stays there unless they tap Send. Before deciding, they can watch that clip back on their phone. If they send it, it is uploaded to us, combined with the card's video into one clip, and screened like any other video (section 3); if the screening flags it, a member of our team may review it before it is delivered. The original upload is deleted once the clip is made. The clip is sent to the card's sender only. Reaction clips are stored privately and opened through short-lived links that we create only for the sender while they are signed in. It is never posted automatically. The sender can download a copy to post, on TINFLE or anywhere else, only if the recipient allowed posting when they sent it; that copy carries the TINFLE logo.

Reactions filmed in person. A sender can also play their card on their own phone and hand it to someone in person. The front camera records that person while the video plays, with a red recording dot on screen, and the recording is handled like a reaction clip: uploaded, combined with the card's video, screened (section 3), and stored privately. It belongs to the sender's account: it is kept in their Tinfles, where they can download a copy (with the TINFLE logo) or delete it. The person filmed needs no account; to have a clip removed, they can ask the sender or write to support@tinfle.com.

Managing a reaction you sent. When a recipient sends a reaction, their phone makes a private management link for it. We keep only a scrambled fingerprint of that link, never the link itself. Anyone with the link can delete that reaction or report a problem, without an account. If the recipient asks us to email the link to them, we use their email address to send that one message and do not store it; we keep only when it was sent, to limit repeat emails. A report they file can include an email address they choose to give us for follow-up, which we erase 90 days after the report is resolved.

Usage information. How you use TINFLE: videos you collect, pass on, or watch, your karma, votes, kiln activity, and sign-in history (kept for account security). Swiping in the Brickyard builds a taste profile that shapes what your crowd is encouraged to send you in a guided show.

Cookies. We use a session cookie to keep you signed in (7 days), an optional trusted device cookie so you can skip the email code on devices you trust (30 days), and a security (CSRF) cookie. When a recipient opens their reaction's management link, a separate cookie lets that browser manage that reaction for up to an hour; it is not tied to any account. We do not use third-party advertising or cross-site tracking cookies.

Visitor analytics. On our public pages (for example the landing, story, occasion, terms, and privacy pages) we measure anonymous visits: how far down the page a visitor scrolls, which sections they reach, how long they stay, the device type, the site that referred them, and an approximate location (city and country) derived from the visitor's IP address at the moment of the visit. We do not store the IP address itself, and we do not link these measurements to any account. They are deleted after 180 days. We do not use any third-party analytics service for this.

3. Automated Content Moderation

Every video uploaded to TINFLE is automatically screened before it can be played anywhere on the platform. This keeps live shows safe to watch blind, which is the heart of the product.

Here is exactly how it works:

Because part of this decision is automated, you have the right to ask for human review. If you believe your video was blocked in error, contact support@tinfle.com and a person will look at it.

4. How We Use Your Information

We do not sell your personal information. We do not run third-party advertising.

5. Who We Share Information With

We share data only with the service providers we need to operate, and only what each one needs:

Live video and audio are transmitted through our own real-time media infrastructure. We may also disclose information if required by law or to protect the safety of our users.

6. What Other People Can See

7. Retention & Deletion

8. Your Rights

You can ask us to provide a copy of the personal data we hold about you, correct it, delete it, or review an automated moderation decision. Email support@tinfle.com from the address on your account and we will respond as quickly as we can.

9. Children

TINFLE is not for children under 13. We ask for your date of birth at signup and do not accept accounts below that age. If we learn an account belongs to a child under 13, we will remove it and delete its data.

10. Security

Everything you send to and from TINFLE travels over an encrypted connection (HTTPS). Videos and reactions are stored encrypted by our storage provider, and the names, titles and messages you type are stored on an encrypted disk. A Tinfle's link is private and opens on one device, and a reaction goes only to the person who sent the Tinfle: only they get a link to it (and our moderators, if the safety check holds it for a closer look), and that link expires within an hour. TINFLE is not end-to-end encrypted: our systems convert each video and run an automated safety check on it before it is delivered.

Passwords are hashed, sign-in requires a one-time email code (with an optional trusted-device skip that you control), cookies are protected against script access, and each account can have only one active sign-in at a time. No system is perfectly secure, but we treat your data as if it were ours.

11. Changes to This Policy

We may update this policy as the platform evolves. Significant changes will be announced on the platform, and the date at the top always reflects the latest version.

© 2026 TINFLE Inc. All rights reserved.

Questions? Reach out to us at support@tinfle.com