Privacy Policy

1. Who We Are

TINFLE is operated by TINFLE Inc., a C Corporation incorporated in the State of Delaware. This policy explains what information we collect, how we use it, and the choices you have. Questions? Reach us at support@tinfle.com.

2. Information We Collect

Account information. Your email address, username, and date of birth (used once to confirm you are at least 13). Your password is stored only as a salted hash. We never store it in plain text.

Content you create. Videos you upload or import, thumbnails, comments, live chat messages, direct messages, and recordings of your live shows when you turn recording on.

Guest information. If you join a private party with a guest pass, we store only the display name you enter. If you use the "Watch This" demo, we store the email address you provide so we can tell you when your friend is ready. You can check "Don't keep my email" and we will erase it when the link ends.

Usage information. How you use TINFLE: videos you collect, pass on, or watch, your karma, votes, kiln activity, and sign-in history (kept for account security). Swiping in the Brickyard builds a taste profile that shapes what your crowd is encouraged to send you in a guided show.

Cookies. We use a session cookie to keep you signed in (7 days), an optional trusted device cookie so you can skip the email code on devices you trust (30 days), and a security (CSRF) cookie. We do not use third-party advertising or cross-site tracking cookies.

Visitor analytics. On our public pages (the landing, story, terms, and privacy pages) we measure anonymous visits: how far down the page a visitor scrolls, which sections they reach, how long they stay, the device type, the site that referred them, and an approximate location (city and country) derived from the visitor's IP address at the moment of the visit. We do not store the IP address itself, and we do not link these measurements to any account. They are deleted after 180 days. We do not use any third-party analytics service for this.

3. Automated Content Moderation

Every video uploaded to TINFLE is automatically screened before it can be played anywhere on the platform. This keeps live shows safe to watch blind, which is the heart of the product.

Here is exactly how it works:

When you upload a video, our servers extract a small number of still frames from it.
Those frames are scored for sexual content, violence, graphic gore, and the apparent presence of minors by automated detection systems. Depending on our current configuration, this analysis runs on our own servers, through Sightengine (sightengine.com), a specialist content analysis provider, or both.
To detect the apparent presence of minors, the analysis estimates the apparent age of faces in the extracted frames. This is not facial recognition: it produces an age estimate only, cannot identify anyone, and is used solely for content safety.
Any frames sent to a third-party provider are submitted without your name, username, email, or any other account information attached.
Extracted frames are deleted after analysis. We keep only the resulting scores alongside the moderation decision.
Based on the scores, your video is approved, held for review by a human moderator, or rejected. Rejected videos are deleted from our storage.
Content that appears to combine minors with sexual material is rejected automatically and may be reported to the relevant authorities.
Content you mark as 18+ is still screened. Marking it 18+ adjusts the thresholds for consensual adult material but never disables screening.

Because part of this decision is automated, you have the right to ask for human review. If you believe your video was blocked in error, contact support@tinfle.com and a person will look at it.

4. How We Use Your Information

To run the platform: live shows, private parties, queues, the Brickyard, kilns, karma, and notifications.
To send you transactional email through our email provider (sign-in codes, password resets, waitlist updates, and "your friend is ready" messages for the demo).
To send browser push notifications, only if you turn them on.
To keep the platform safe: content moderation, spam and abuse prevention, rate limiting, and sign-in security (we allow one active sign-in per account).

We do not sell your personal information. We do not run third-party advertising.

5. Who We Share Information With

We share data only with the service providers we need to operate, and only what each one needs:

Sightengine receives still frames from uploaded videos for content analysis when our moderation configuration uses it, as described in section 3. No account information is attached. When moderation runs entirely on our own servers, no frames leave our infrastructure.
Our email provider (SendGrid) receives your email address to deliver transactional email.
Our hosting and storage provider (DigitalOcean) stores our servers, your uploaded videos, thumbnails, and recordings.
Your browser's push service (operated by your browser vendor) delivers push notifications if you enable them.

Live video and audio are transmitted through our own real-time media infrastructure. We may also disclose information if required by law or to protect the safety of our users.

6. What Other People Can See

Your profile, username, karma, and public videos are visible to other users.
Public live shows can be watched by any signed-in user.
Private parties are visible only to people who hold the invite link. Party invite links die with the party.
Videos you mark private are hidden from the feed and from live shows.

7. Retention & Deletion

Videos rejected by moderation are deleted from storage.
You can delete your own videos at any time.
"Watch This" demo links expire after 5 hours, and sender emails are erased on request.
Anonymous visitor measurements from our public pages, including the approximate location, are deleted after 180 days.
To delete your account, contact support@tinfle.com. We will delete or anonymize your personal data. Your username remains reserved so nobody can impersonate you afterward.

8. Your Rights

You can ask us to provide a copy of the personal data we hold about you, correct it, delete it, or review an automated moderation decision. Email support@tinfle.com from the address on your account and we will respond as quickly as we can.

9. Children

TINFLE is not for children under 13. We ask for your date of birth at signup and do not accept accounts below that age. If we learn an account belongs to a child under 13, we will remove it and delete its data.

10. Security

Passwords are hashed, sign-in requires a one-time email code (with an optional trusted-device skip that you control), cookies are protected against script access, and each account can have only one active sign-in at a time. No system is perfectly secure, but we treat your data as if it were ours.

11. Changes to This Policy

We may update this policy as the platform evolves. Significant changes will be announced on the platform, and the date at the top always reflects the latest version.

Questions? Reach out to us at support@tinfle.com