What We Collect and How We Use It
Account Information: When you create an account on the Services (an "Account"), we’ll ask you for information such as your username, password, age, and email address (“Account Information”). We may use Account Information, alone or together with other information, to enhance and improve the Services, such as by personalization. We use your age to verify that you can lawfully use the Services. We use your email address to verify your Account and to communicate with you, as described in more detail below. We also allow users to look for their friends by email address; you can, however, opt out of email lookup through your Account Settings.
You can keep yourself fairly anonymous on Tumblr, but remember that your posts, blogs, pages, and username are all visible to the public by default. People that know your email address can also find your blogs. If you’d rather be unlisted, head over to your Account Settings.
Email Communications with Us: As part of the Services, you may occasionally receive email and other communications from us. Administrative communications relating to your Account (e.g., for purposes of Account recovery or password reset) are considered part of the Services and your Account, which you may not be able to opt-out from receiving. We also may send you other kinds of emails, which you can opt-out of either from your Account Settings page or by using the “Opt-Out” link in the emails themselves.
Information about Your Accounts on Third Party Services: You can link your Account to certain Third Party Services. In order to do so, you may provide us with your username or other user ID for a Third Party Service, and you may then be required to log into that Service. After you complete this login process, we will receive a token that allows us to access your account on that service so that we can, for example, post your content to that service when you ask us to. We do not receive or store your passwords for your Third Party Service accounts.
Information Obtained from Third Party Services: In some cases, we partner with Third Party Services that may provide information about you. Such information could include, for example, your gender, if you have disclosed that information to that third party and made it available for to access. To the extent we obtain such information, we may use it to develop new Services or to improve or enhance the Services.
When you connect other services to your account, those services might share information about you with us. What gets shown to us is determined by their privacy policies, which are long and boring, but which you should probably read if you have questions or concerns.
User Content: By default, all sharing through the Services is public, and when you provide us with content it is published so that anyone can view it. Although we do provide tools, like password-protected blogs, Asks, and Fan Mail, that let you publish content privately, you should assume that anything you publish is publicly accessible unless you have explicitly selected otherwise. Also, please keep in mind that anything you share privately with another user, particularly through an Ask, Fan Mail, or submitted post, may be posted publicly by that user. Content published and shared publicly is accessible to everyone, including search engines, and you may lose any privacy rights you might have regarding that content. In addition, information shared publicly may be copied and shared throughout the Internet, including through actions or features native to the Services, such as reblogging.
At its heart, Tumblr is a public platform. Don’t be afraid to share amazing things, but do understand that it can be hard to completely remove things from the internet once they’ve been reblogged a few times.
Native Actions: The Services allow you to perform native actions that are integral to our products, such as liking a post, reblogging a post, replying to a post, and following a blog. Liking, reblogging, and replying are public actions – anyone can expand the “notes” view on a post, for example, to see who liked, reblogged, or replied to a post. We use information about native actions to improve the Services, develop new Services, and, particularly, to personalize your Tumblr experience. Personalization using this information may include presenting you with new posts relevant to what you’ve liked, providing you with better search results, and showing you advertising more relevant to your interests.
Reblogs, Likes, and Replies are a matter of public record, so if you’re truly ashamed of your desires it’s best to keep them to yourself. But why? Be proud of who you are. You’re beautiful. We’re looking you in the eyes and telling you how beautiful you are.
Information About User Content: In some cases, we may collect information about content you provide to the Services. For example, when it's included as part of your images, we may collect information describing your camera, camera settings, or EXIF information. This information allows us to improve the Services and provide additional features and functionality.
Information Related to Use of the Services: We collect information about how people use the Services, including those with an Account. This type of information may be collected in our log files each time you interact with (i.e., make a request to) the Services. We use internal tools and third party applications and services (like Google Analytics or comScore) to collect and analyze this information. Some of this information may also be associated with the Internet Protocol Address (“IP Address”) used to access the Services; some may be connected with your Account; and some may only be collected and used in aggregate form (as a statistical measure that wouldn’t identify you or your Account). We also collect your IP Address when you make a post, particularly when you submit an anonymous “Ask.” We may use this information about how you and others interact with the Services for a number of things generally related to enhancing, improving, protecting, and developing new Services, including but not limited to: providing users with personalized content; providing users with targeted advertising; improving our search results; identifying trending or popular content; fighting spam, malware, identity theft and generally keeping our users and community safe; and for legal and safety reasons as set forth in “Information Disclosed for Our Protection and the Protection of Others.”
We use information about how you interact with Tumblr in order to personalize it for you, to keep both you and our community safe from harm, and to improve Tumblr for everyone who uses it.
Information Related to Your Web Browser: We automatically receive and record information from your web browser when you interact with the Services, such as your browser type and version, what sort of device you are using, your operating system and version, your language preference, the website or service that referred you to the Services, the date and time of each request you make to the Services, your screen display information, and information from any cookies we have placed on your web browser (as described below). We also sometimes detect whether you are using certain web browser extensions and store that information in a manner associated with your Account. We use web browser-related information to enhance and improve the Services.
Location Information: In some cases we collect and store information about where you are located, such as by converting your IP Address into a rough geolocation. We may also ask you to provide information about your location, for example to use your geolocation information from your mobile device to geotag a post. We may use location information to improve and personalize the Services for you, for example by showing you relevant local content. may determine your location by using drone technology and live video feeds. Haha, no, we just check out your IP address or any location data you attach to a post. Normal stuff.
Information Related to Your Mobile Device: We may collect and store information related to your mobile device. In some cases, we may receive, generate, or assign your mobile device a unique identifier for the purposes described above in “Information Related to Use of the Services.” We may also ask you to provide your phone number to enable new products and improve the Services, such as by enabling multi-factor authentication for Account login. We will always ask you whether it’s OK for us to collect and store your phone number.
Being able to log into your account is one of Tumblr’s many great features. Cookies make this possible. Cookies and web tags also let us learn how people use Tumblr, which in turn helps us make a better product for you to use.
Information About Your Contacts: Certain features of the Services allow you to provide us with your contact lists, so that we can connect you with people in our Services that are also on those contact lists. For example, you can temporarily connect your email contact information to your Account, so that we can provide you with a list of your email contacts that use the Services. As another example, you can send us your mobile phone contact information through our mobile applications, which then allows us to provide you with a list of those contacts that use the Services so that you can “follow” their blogs. We will give you a choice as to whether or not you provide us such information, and we will disclose fully, within the appropriate feature, how we use that information.
We won’t look at (or be able to look at) your contact list unless you ask us to. Why would you ask us to? Because that’s how you would find out if any of your contacts are on Tumblr. We discard this information immediately afterward.
Derived Information: As described above in “Native Actions” and “Information Related to Use of the Services,” we analyze your actions on the Services in order to derive or infer characteristics that may be descriptive of your Account (for example, what kinds of blogs you follow or what kinds of posts you view, like, or reblog). We use this information for all of the purposes set forth in “Information Related to Use of the Services,” above.
In order to provide you with all of this content for free, selectively runs advertisements. We, and our parent company, Automattic, work with online advertising companies to provide you with advertising that is as relevant and useful as possible. To make our ads more relevant and useful, we make educated guesses about your interests based on your activity on our sites and services. The ads we show you often reflect these interests and educated guesses.
To learn more about how we select the ads you see, you can check out Tumblr’s Advertising and affiliate policies.
Managing your choices for personalized advertising experiences: If you do not prefer personalized advertising experiences, you may opt-out. Note that if you opt-out you will continue to see advertisements , though they will be less relevant and useful to you.
When using web-based versions of Tumblr, you may opt-out of interest-based or personalized advertising by using the following industry opt-out pages:
These industry advertising organizations offer web browser-based tools for limiting the use of your web viewing data for interest-based or personalized advertising. Any choices made via these industry tools will only apply to the web browser in use for the choices made. These advertising choices are not propagated among all of your devices.
When using the mobile app version of on Android devices you can opt-out of personalized advertising by selecting "Opt out of Interest Based Ads” in Google settings. For more information about these Android options:
With Whom Your Information Is Shared
Information Shared with and Received from our Corporate Parents: We are a wholly-owned subsidiary of Automattic, and a member of the Automattic family of companies. Because we are a wholly-owned subsidiary, Automattic and the rest of our family of companies may receive any information we do, and may share information they have with us. Our family of companies may use the information they receive from us to help us provide, understand, and improve the Services (including by providing us analytics) and in connection with their products and services (including by providing you with a more personalized experience).
Automattic owns us and we share with it and the Automattic family of companies.
Information Shared with the Public Through the Services: As noted in “User Content” and “Native Actions,” above, by default, content published through the Services and many actions you take on the Services are shared with the public. Because this kind of information can be seen by anyone and may be indexed by search engines, you should be careful about what you choose to disclose publicly and make sure it’s information you want to share with everyone.
The content you create on is, by default, public. This means that anyone can see it, and that search engines can index it. If these things bother you, take a look at some of the additional privacy features we offer.
Information Shared Between the Services: We may, if possible, aggregate information about your use of multiple Services and use that consolidated information to enhance and improve the Services, and to develop new Services.
Information Shared with Our Agents in Order to Operate and Improve the Services: In some cases, we share information we store (such as IP addresses) with third parties, such as service providers, consultants, and other agents ("Agents"), for the purposes of operating, enhancing, and improving the Services, and developing new products and services. For example, we may share information with service providers that help us fight spam, payment providers that process your credit and debit card information, customer chat and email support services that help us communicate with you (hey there!), analytics providers that help us understand and improve our services, and third party partners that pitch in on our marketing efforts (like identifying a specific marketing target group or improving our marketing campaigns, and by placing ads to market our services), along with third-party consultants who may have access to information in the process of improving our processes and technology. Agents with whom we share such information for these reasons are generally bound by confidentiality obligations and, unless we tell you differently, our agents do not have any right to use information we share with them beyond the scope and duration of what is necessary to assist us.
Information Disclosed Pursuant to Business Transfers: In some cases, we may choose to buy or sell business assets. In these transactions, user information is typically one of the transferred business assets. Moreover, if we, or substantially all of our assets, were acquired, or if we go out of business or enter bankruptcy, user information would be one of the assets that is transferred or acquired by a third party. You acknowledge that such transfers may occur, and that any acquirer of us or our assets may continue to use your Personal Information as set forth in this policy.
Don’t make us narc on you. We don’t want to. But we do need to protect everyone who uses from harming us, each other, or themselves. We work hard to balance privacy and community, and we’re sure you can appreciate the challenges in that and the seriousness with which we take those challenges.
Information We Share with Your Consent or at Your Request: If you ask us to release information that we have about your Account, we will do so if reasonable and not unduly burdensome.
Information Shared with Other Third Parties: We may share or disclose non-private information, Aggregate Information, or other non-personally identifying information with people and entities that we do business with.
Security and Retention of Your Information
Your Account Information is protected by a password for your privacy and security. We may enable additional security features in the future, like multi-factor authentication. You need to prevent unauthorized access to your Account and information by creating a unique, secure, and protected password and limiting access to your computer and browser by signing off after you have finished accessing your Account on the Services.
What Information You Can Access
If you are a registered user, you can access most information associated with your Account by logging into the Services and checking your Account Settings page. Registered and unregistered users can access and delete cookies through their web browser settings.
How to Delete Your Account and What Happens When You Delete Your Account
If you want to delete your Account. Deleting your Account may not fully remove the content you have published from our systems, as caching of, backups of, copies of, or references to your Account Information may not be immediately removed. In addition, given the nature of sharing on the Services, some of the public activity on your Account prior to deletion (such as reblogs of your blog posts) may remain stored on our servers and accessible to the public.
You’ll do great things, surely, but if it ever comes time to say goodbye, then you’re free to delete your account at any time and for any reason. The deletion will be effective immediately, for the most part, but it might take a little while to scrub everything from our archives and backups.
What won’t get scrubbed are Reblogs of your posts. Those will remain on whatever blog reblogged them. Like we said before, it can be really, really hard to delete something once it goes out onto the internet, so be sure you’re only publishing stuff that you’re certain you want to publish.
If you’re a California resident, you have a number of rights and choices. To learn more, see the Supplemental Privacy Notice for California Residents below.
Where to Direct Questions or Concerns
If you have any questions or concerns regarding privacy using the Services
Link to Prior Versions
Supplemental Privacy Notice for California Residents
Summary of Information We Collect
If you’re a California resident, California law requires us to provide you with some additional information about how we collect, use, and disclose your “personal information,” as defined in the California Consumer Privacy Act ("CCPA").
We may also use the categories of personal information for compliance with applicable laws and regulations. We may aggregate the information we collect or de-identify it in order to limit or prevent the identification of any particular user or device.
California Privacy Rights
If you’re a California resident, the CCPA provides you with rights regarding your personal information.
Access: The CCPA gives you the right to request a copy of certain information we hold about you, as well as a summary of: the categories of personal information we have collected or disclosed about you in the last twelve months, the categories of sources of such information, the business or commercial purpose for collecting or sharing that information, and the categories of third parties with whom we shared that information. As described in the section ‘What Information You Can Access,’ you can access much of your information by logging in to your account. You can also request a personal data report by submitting a request in the Privacy section of your Settings. You need to be signed in to your account to submit this request, and you will have to log in to your account to access the summary or the report. If you want to request the summary described above, require additional assistance, or if you do not have an account, submit a support ticket
Delete: The CCPA also gives you the right to delete certain information we have about you. You can delete much of your information by logging in to your account. If you cannot do this, or you do not have an account, please submit a support ticket, or email us at email@example.com. For more information on deleting your account or leaving Tumblr, please refer to the section ‘How to Delete Your Account.’
Financial Incentives: You may have the right to receive information about the financial incentives that we offer to you (if any).
Consequences of Exercising Rights: You also have the right not to be discriminated against (as provided for in applicable law) for exercising your rights.
Certain information may be exempt from these rights under applicable law. For example, we need certain types of information so that we can provide you with the Services. If you ask us to delete them, you may no longer be able to access or use the Services.
Before we can satisfy your request, you’ll need to give us enough information so that we can be certain of your identity. To do that, you’ll need to log in to your account or give us certain information about you and/or your use of the Services. You can also designate an authorized agent to make a request on your behalf. To do so, you have to give us written authorization for the agent to act on your behalf. You’ll still need to verify your identity directly with us.
Personalized Advertising Opt-Out: selectively runs advertisements so we can provide you with content for free. To help select which ads to show you, we may share some of your information with advertising partners, or allow our advertising partners to “collect” certain information. The personal information we share includes online identifiers and internet or other network or device activity (such as cookie information, other device identifiers, and IP address), and geolocation data (approximate location information from your IP address). Under the CCPA, this may be considered a “sale.” To learn more about how we select the ads you see, check out advertising and affiliate policies. We do not sell (or share) information that identifies you personally, like your name or contact information, in our ads program. Also, we do not knowingly "sell" your personal information if you are under 16.
Learn how you can opt out by going to California: Do Not Sell My Personal Information. If you are a California user who has told us you are under 16, you’ll see in your settings that we’ve already opted you out.