Privacy Policy

thetinyus.com is run by Yauheni Berlenka, who decides how your data is used (the data controller). The postal address is in the legal notice. You can reach us about anything in this policy at support@thetinyus.com.

When you sign in:

• your email address, and with Google also your name and Google account ID;
• when you signed in, your language, how you first found us (for example, one of our campaign links), and the country of your last visit: two letters, worked out on our own server from your IP address; the address itself isn't saved with your account.

When you make an invitation:

• what you put in it: names, texts, photos, voice notes, date options, activities and settings;
• a short record on your account: when each invitation was built and sent, and whether it got a yes or a no.

When someone answers your invitation:

• their answer, the date, time and activities they pick, and any wishes or ideas they add;
• when the invitation was first opened and when it was answered.

When you visit:

• our own visit journal: pages and actions, the site you came from, campaign tags, device type, browser, operating system and time on the page. Invitation addresses are masked in it;
• only if you accept Google Analytics cookies: the pages you view and what you tap, with invitation addresses masked, and a random ID in its cookies; Google works out your approximate location from your IP address;
• server logs with the IP address, browser and requested address, for security and troubleshooting;
• if a page's scripts fail to load, the page address and browser, so we can fix it.

When you write to our support chat:

• your messages and the photos you attach, and your email address if you leave it for the reply;
• the page you wrote from, your browser and device type, your account if you're signed in and, when our statistics cookie is in your browser, a link to your visits on the site, so our team can see how you got to your question.

When you order a song:

• what you give us for it: your description, the style, the voice and the other settings you pick;
• the songs made from it: audio files, titles, and whether each try worked.

When you buy something:

• what you bought, the price, currency and payment method, when you paid, when you ticked the box for delivery right away, the payment's status and its number at lava.top (with the reason, if a bank declines it), and the email you paid with;
• for Bancontact, your full name: it goes straight to the payment provider for that payment, and we don't keep it. Card, bank and PayPal details you enter on the provider's own page, and we never see them.

You need an email address to sign in and get an invitation link; without one we can't make it. We make no automated decisions about you.

• To run the service you asked for: build and deliver invitations and songs, sign you in and send your emails (performance of our agreement with you).
• To take payments, deliver what you bought and handle refunds and chargebacks (performance of our agreement with you), and to keep payment records for tax and accounting (a legal obligation).
• To answer you in the support chat: a person from our team reads your messages and replies (performance of our agreement with you, or steps you ask for before one).
• For people who get an invitation: showing it to them and passing their answer to the sender (our and the sender's legitimate interest).
• To keep it safe and working: prevent abuse, fix bugs and keep backups (our legitimate interest).
• To see what works: our own first-party statistics (our legitimate interest) and, only if you accept, Google Analytics (your consent). No ad networks.

We don't sell your data or share it with advertisers.

You don't need an account to open or answer an invitation. The sender wrote your name and the rest. Your answer, the date you pick and your wishes are deleted with the invitation; after that the sender's account keeps only whether it was a yes or a no, and when, until they delete their account.

Want an invitation addressed to you removed? Write to support@thetinyus.com.

We email you sign-in codes, a confirmation when you pay, your invitation link once it's ready, a note when your song is ready, a note when someone answers your invitation, and reminders about an invitation you built but never got the link for (one tap in a reminder turns them off). If you save a date ticket to your account, we email it to you too. No newsletters. If a support reply arrives after you've left the chat, we email it to you: to your account's email if you're signed in, or to the email you left in the chat.

We set our own cookies: the ones the site needs to work, and a few for our own visit statistics. Google Analytics cookies come only if you accept them in the cookie bar. There are no advertising cookies.

• __Secure-authjs.session-tokenKeeps you signed in.Lasts: 30 days, renewed while you use the site
• __Host-authjs.csrf-tokenProtects the sign-in forms from forged requests.Lasts: until you close the browser
• __Secure-authjs.callback-urlRemembers where to take you after you sign in.Lasts: until you close the browser
• __Secure-authjs.pkce.code_verifierSecures the round trip to Google when you sign in with Google.Lasts: 15 minutes
• ctd_localeRemembers your language while you sign in with Google.Lasts: 15 minutes
• ctd_inTells the page header you're signed in. It holds no secret and opens nothing.Lasts: 400 days, removed when you sign out
• guestLets you add photos and a voice note, or write to support, before you sign in. A random, signed ID.Lasts: 14 days
• ctd_chatTells the support chat that you have a conversation, so it checks for replies. Set only once you write to support.Lasts: 30 days, renewed with each message
• ans_<invitation>Remembers that this browser already answered an invitation.Lasts: 60 days
• ctd_vA random ID for our own visit statistics, so a returning browser counts once. In Germany and Austria, set only after you accept.Lasts: 390 days
• cRemembers which of our campaign links brought you here.Lasts: 180 days
• refRemembers the ticket whose QR code brought you here.Lasts: 30 days
• no_statsTurns our statistics off for this browser. Set when you open /optout or our admin pages.Lasts: 390 days
• NEXT_LOCALERemembers the site language.Lasts: until you close the browser
• ctd_consentRemembers your cookie choice: accepted or declined.Lasts: 180 days, then we ask again
• _ga_ga_RYGB84C56EGoogle Analytics: tells visits from the same browser apart. Set only after you accept, deleted when you decline.Lasts: 390 days from your last visit

Our own statistics don't need your consent: a random ID in our own cookie (in Germany and Austria only after you accept), read only by our server, never shared and used only to count visits, improve the site and, if you write to our support chat, show our team your visits. Visit records are deleted after 90 days. To be left out, open thetinyus.com/optout in each browser you use.

Your cookie choice is kept for 180 days, then we ask again. Change it any time in Cookie settings, here or at the bottom of the home page. Declining after accepting stops Google Analytics and deletes its cookies.

Your browser also keeps in its local storage your theme choice, your unfinished invitation draft and whether you hid the email request in the support chat. They stay on your device.

The payment pages of lava.top, Unlimint and PayPal are their own sites, with their own cookies.

A few providers help us run thetinyus. Unless we say otherwise below, they handle data only on our instructions:

• Hetzner - our server and database, in Finland (EU);
• Cloudflare - our domain's DNS, storage for photos, voice notes, songs and backups (R2, EU jurisdiction) and the Turnstile bot check on the sign-in form;
• Resend - sending our emails, from its EU region (Ireland);
• Telegram - our team's work chat: support chat messages and photos arrive there with your name or email if you're signed in (or the email you left in the chat), the page you wrote from and your device type; and alerts to our team when a page fails to load, with the page address and browser version;
• Anthropic - translates support chat messages between your language and our team's language, and writes the lyrics and title of a song from your description. Only the text for those two jobs is sent: the chat messages, or the song description with the style, the voice, the language and whether the song is for her or him;
• Proton - the mailbox of support@thetinyus.com and hello@thetinyus.com, in Switzerland;
• lava.top (LAVALANE LTD, Cyprus) - our payment agent. It gets what you're buying, the price and currency, your email, the payment method and the page language, plus the full name you enter for Bancontact; it passes the payment to the provider that handles your method, such as the ones below, and tells us whether it went through;
• Unlimint (Cyprus) - processes card, Apple Pay and SEPA transfer payments for lava.top, and may process other methods too: you enter your card or bank details on its page, and it checks them with your bank, for example with 3-D Secure;
• PayPal - if you choose PayPal, you pay on PayPal's own page, and PayPal gets the amount and whatever you enter there;
• kie.ai - our music service: it gets the lyrics and title written for your song and its style and voice settings (or your own description, for an instrumental or when the lyrics couldn't be written), never your name or email from your account; it has the song made and sends us the audio;
• Suno - the AI model behind our songs: it composes and sings the song from what kie.ai passes on;
• Google - sign-in with Google, if you choose it; Google Analytics, only if you accept its cookies; and a forwarded copy of what you write to our addresses.

lava.top, Unlimint and PayPal also use payment data for their own duties, such as preventing fraud and following financial law; for that part, each answers for it under its own privacy policy.

A song description reaches Anthropic, and at times kie.ai and Suno, as you write it, so leave out anything you wouldn't want an AI service to read, such as someone's full name, address or health details. kie.ai and Suno handle what they get under their own terms.

The country of a visit is looked up on our own server with the IP to Country Lite database by DB-IP (CC BY 4.0). Your IP address is never sent to them.

The same lookup, along with your browser's language, also picks the language the site opens in; the guess isn't saved, and a language you choose yourself always wins.

Our server and stored files are in the EU, and our mailbox is in Switzerland, which the EU recognizes as protecting data adequately. Cloudflare, Resend, Google and Anthropic are US companies, so some data may be handled in the US or elsewhere. When it is, we rely on the safeguards they provide, such as the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses. Telegram, our team's work chat, keeps data in its own data centers, which may be outside the EU.

lava.top and Unlimint are in Cyprus (EU). lava.top's own privacy policy says a contractor outside the EU helps run its platform, and PayPal may handle data in the US; each covers those transfers under its own policy.

kie.ai and Suno work outside the EU, Suno in the US. We have no transfer agreement with them, so we send them only what your song needs, and only because you ordered it (GDPR Article 49(1)(b)).

• An invitation with its photos, voice notes, song and answer: deleted 30 days after its link is created, or after it was built if the link never was. You can delete it sooner in My invitations.
• Files you uploaded but never used in an invitation: deleted after a week.
• A song bought on its own: deleted with its audio and description 30 days after purchase. For a song made in an invitation, the audio goes with the invitation, while the description you gave stays on your account until you delete the account, so we can count the tries used.
• Support conversations are kept for 30 days after the last message. Attached photos are deleted after 72 hours. Deleting your account also removes its conversations, photos and Telegram support topics. If Telegram refuses a topic deletion, we finish that removal manually.
• Your account and its short invitation record: until you delete the account.
• Payment records (what was bought, the amount, currency, method and date, and when you agreed to delivery right away): kept for tax and accounting as long as the law requires, even after you delete your account. The email you paid with is erased when the invitation or song is deleted, and the link to your account when you delete the account.
• Sign-in codes: deleted after a day.
• The visit journal and script error reports: 90 days. After that only anonymous daily totals remain, apart from campaign link visits (below). If you delete your account, your past visits stay there until that term runs out, with no link to you.
• Google Analytics data tied to your browser: up to 14 months in Google Analytics, after that only anonymous totals remain.
• Visits through our campaign links: the visit and its random browser ID, kept for campaign statistics until the campaign is removed.
• Server logs: a few rotating files, overwritten as new traffic comes in.
• 14 nightly database copies are kept. User files remain in a media backup for at most 30 days from their first copy. Repeated copies do not extend that period, and expired files are not copied again. Support chat photos are excluded from media backups.
• An unpaid video note is kept for 30 minutes from upload or the last invitation save, or while a payment is in progress. Once paid, it stays with the invitation.

Depending on where you live (for example, under the GDPR in the EU and the UK), you can ask to:

• see the data we hold about you and get a copy in a portable format;
• correct it;
• delete it (you can delete your account yourself in your profile; payment records we must keep by law stay until that time is up);
• object to or restrict how we use it;
• withdraw a consent you gave, whenever we ask for one.

Write to support@thetinyus.com from the email on your account, and we'll answer within a month. You can also complain to the data protection authority where you live.

Everything travels over HTTPS. Photos and voice notes sit in private storage and open only through signed links that expire. Invitations are hidden from search engines, so only people with the link can open them. Card details never reach us: you enter them on the payment provider's page.

thetinyus is for adults. We don't knowingly collect data from anyone under 18, and if we learn that we have, we delete it.

When this policy changes, we update the date at the top and point out important changes on the site.

Questions or requests about your data? Write to support@thetinyus.com.