What Information We Collect and How We Use It
Email Communications with Us: As part of the Services, you may occasionally receive email and other communications from us, such as administrative communications relating to your Account (e.g., for purposes of Account recovery or password reset). These communications are considered part of the Services and your Account, which you may not be able to opt-out from receiving. You can opt-out of most communications from Tumblr, such as new follower emails; please see your Account Settings page. Note that we will never email you to ask for your password or other Account information; if you receive such an email, forward it to us.
Information about Your Accounts on Third Party Services: You can link your Account to certain Third Party Services. In order to do so, you will provide us with your username or other user ID on each of those Third Party Services. You may also be required to engage in an authorization process with each of those Third Party Services, where we receive a token that allows us to access those accounts so that we can, for example, when you choose, post your Tumblr content, or links to your Tumblr content, to those services. We do not receive or store your passwords for your Third Party Service accounts.
Information Obtained from Third Party Services: In some cases, when you connect your Account with your accounts on Third Party Services, we may obtain information about you from those Third Party Services. Such information could include, for example, your gender, if you have disclosed that information to that third party and made it available for Tumblr to access. To the extent we obtain such information, we may use the information about you that we receive from Third Party Services to improve and personalize the Services. As a general practice, we strongly urge you to make careful judgments about any personal information you disclose to Internet services, including Tumblr and linked Third Party Services, regardless of whether you choose to link your accounts together.
User Content: By default, all sharing through the Services is public, and when you provide us with content it is published so that anyone can view it. Although we do provide tools, like password-protected blogs, that let you publish content privately, you should assume that anything you publish is publicly accessible unless you have explicitly selected otherwise. Content published and shared publicly is accessible to everyone, including search engines, and you may lose any privacy rights you might have regarding that content. In addition, information shared publicly may be copied and shared throughout the Internet, including through features native to the Services, such as "Reblogging." While you are free to remove published pieces of content from or delete your Account, because of the nature of Internet sharing, the strong possibility of Reblogging of your content by others, and technological limitations inherent to the Services, copies of that content may exist elsewhere and be retained indefinitely, including in our systems.
Information About User Content: In some cases, we may collect information about content you provide to the Services. For example, when it's included with your images, we may collect information describing your camera and camera settings. This information allows us to improve the Services and provide additional features and functionality.
Information Related to Use of the Services: We collect information about how people use the Services, including those with an Account. This information includes general usage information, and may include information such as the number and frequency of our visitors, which pages or features of the Services they have visited, which links on the Services they have clicked on, and the length of those visits. We may also use third party applications and services, such as Google Analytics and Quantcast, to collect and analyze this information. This information enables us and third parties authorized by us to figure out how often individuals use the Services so that we can analyze and improve them. Some of this information may be associated with the IP Address (as defined below) used to access the Services, and some may be associated with your Account, such as the topics you search for and the help pages that you visit. We may also use some of this information in aggregate form, that is, as a statistical measure related to all of our users that would not identify you personally. We use information about your use of the Services to improve and enhance your experience on the Services.
Information Related to Your Web Browser: We automatically receive and record information from your web browser when you interact with the Services, such as your browser type and version, what sort of device you are using, your operating system and version, your language preference, the website or service that referred you to the Services, the date and time of each web request you make, your screen display information, and information from any cookies we have placed on your web browser (as described below). We also sometimes detect whether you are using certain web browser extensions and store that information in a manner associated with your Account. Web browser-related information is used to enhance your experience with the Services (for example, by personalization) and to allow us to improve the Services; it is not, however, used in a manner that would identify you personally.
IP Address Information: Under certain circumstances, such as when you log into the Services, load a web page from the Services, or send an "Ask" message anonymously, we may collect and store your Internet Protocol Address ("IP Address"). We generally use IP Address information to fight spam, malware, and identity theft; we also may use it, in the future, to personalize the Services for you. IP Address information is also used by us to generate aggregate, non-identifying, information about use of the Services.
Location Information: In some cases we collect and store information about where you are located, such as by converting your IP Address into a rough geolocation. We may use location information to improve and personalize the Services for you.
Information Related to Your Mobile Device: We may collect and store information related to your mobile device, such as your phone number. You will have a choice as to whether we collect and store this information. We may use this information to improve the Services, such as by allowing you to verify your account by text message.
Information About Your Contacts: Certain features of the Services allow you to provide us with your contact lists stored on other services, so that we can connect you with people in our Services that are also on those contact lists. For example, you can temporarily connect your e-mail contact information to your Tumblr.com account, so that we can provide you with a list of your e-mail contacts that use Tumblr.com. As another example, you can send us your mobile phone contact e-mails through our mobile applications, which then allows us to provide you with a list of those contacts that use Tumblr.com. We will give you an explicit choice as to whether or not you provide us such information, and we will disclose fully, within the appropriate feature, how we use, and whether we will store, that information.
Derived Information: We analyze your actions on the Services in order to derive or infer characteristics that may be descriptive of you (for example, what kinds of blogs you like to follow). These characteristics are used to improve and personalize the Services.
Email Tracking: We may place information in our emails to you (such as a web beacon) that allows us to measure our email deliverability.
With Whom Your Information Is Shared
We never share information we receive from you unless: (a) we have your permission to share that information; (b) we have given you prior notice that the information will be shared, and with whom; or (c) that information is aggregate information or other information that does not identify you.
Information Shared with the Public Through the Services: As noted above, by default, content published through the Services is shared with the public, and this is an important feature of the Services. Such information includes, but isn't limited to, anything you choose to post on or submit to a public blog, including "About" information that may describe you and anything apparent in a posted photograph. Because this kind of information can be seen by anyone and may be indexed by search engines (like Google Search), you should be careful in what you choose to disclose publicly and make sure it is information you want to share with everyone.
Information Shared Between the Services: We may, if possible, aggregate information about your use of multiple Services and use that consolidated information to improve how the Services operate, and to develop new Services.
Information Shared with Our Agents in Order to Operate and Improve the Services: In some cases, we share information that we store (such as IP Addresses) with third parties, such as our service providers, consultants and other agents ("Agents"), for the purposes of operating and improving the Services. For example, we may share information with service providers in order to fight spam, and third-party consultants may have access to information in the process of improving our processes and technology. Agents with whom we share such information for these reasons are generally bound by confidentiality obligations and, unless we tell you differently, our Agents do not have any right to use Personal Information or other information we share with them beyond the scope and duration of what is necessary to assist us. You hereby consent to our sharing of Personal Information with our Agents.
Information Shared with Third Parties: We may share or disclose non-private information, Aggregate Information, or other non-Personal Information with people and entities that we do business with.
Information Disclosed Pursuant to Business Transfers: In some cases, we may choose to buy or sell business assets. In these transactions, user information is typically one of the transferred business assets. Moreover, if we, or substantially all of our assets, were acquired, or if we go out of business or enter bankruptcy, user information would be one of the assets that is transferred or acquired by a third party. You acknowledge that such transfers may occur, and that any acquirer of us or our assets may continue to use your Personal Information as set forth in this policy.
Information We Share with Your Consent or at Your Request: If you ask us to release information that we have about your Account, we will do so if reasonable and not unduly burdensome.
The Security of Your Information
Your Account information is protected by a password for your privacy and security. You need to prevent unauthorized access to your Account and Personal Information by selecting and protecting your password appropriately and limiting access to your computer and browser by signing off after you have finished accessing your Account on the Services.
We seek to protect your information (including your Account information) to ensure that it is kept private; however, we can't guarantee the security of any information. Unauthorized entry or use, hardware or software failure, and other factors, may compromise the security of user information at any time.
What Information You Can Access
If you are a registered user, you can access and delete most information associated with your Account by logging into the Services and checking your Account Settings page. Registered and unregistered users can access and delete cookies through their web browser settings.
Your California Privacy Rights: Under California Civil Code sections 1798.83-1798.84, California residents are entitled to ask us for a notice identifying the categories of personal customer information that we share with our affiliates and/or third parties for marketing purposes, and providing contact information for such affiliates and/or third parties. If you are a California resident and would like a copy of this notice, please submit a written request to the following address: 35 East 21st St, 10th Floor. New York, NY 10010.
How to Delete Your Account and What Happens When You Delete Your Account
If you want to delete your Account, you can do so from your Preferences page or by emailing us and providing proof of authority over the Account. What constitutes "proof of authority" will vary depending on the circumstances, but generally will require sufficient identifying information so that we can be confident you are the Account owner. Deleting your Account may not fully remove the content you have published from our systems, as caching of, backups of, copies of, or references to your Account information may not be immediately removed. In addition, given the nature of sharing on the Services, some of the public activity on your Account prior to deletion (such as Reblogs of your blog posts) may remain stored on our servers and accessible to the public.
Where to Direct Questions or Concerns
If you have any questions or concerns regarding privacy using the Services, please send us a detailed message.
Link to Prior Versions