Privacy Policy

Last updated: [DATE]

The short version: we collect what we need to run Thmbz: your email, username, birthday (to check you're 18+), optional details (gender, occupation, country) for targeted questions, and what you post. Your questions, photos, comments and username are public. How you voted is not. We don't sell your data or show ads, and you can delete your account and everything you've posted at any time from the app.

Who we are

Thmbz ("we", "us") is run by [YOUR NAME OR COMPANY], [ADDRESS]. Questions about this policy or your data: support@thmbz.com.

What we collect

Information	Why we need it	Who can see it
Email address	To sign you in with a one-time code and to contact you about your account	Only us
Date of birth	To confirm you're 18 or older. We keep the first birthday you give us so the age check can't be bypassed later	Only us
Username	So others know who asked or commented	Everyone
Gender, occupation and country (optional; you can choose "Prefer not to say" and change them any time on the Me tab)	So askers can aim a question at a group (for example "women 25–34 in the UK"), and you see the questions aimed at groups you belong to. They also make up a question's "results by group" (for example "Women: 81% yes"), shown only for groups of at least 10 voters, never who voted. Your age group comes from your birthday	Only us. Askers choose a group but never see who is in it or who voted
Questions, photos, topics and comments	That's the app	Everyone (unless hidden after reports)
Your votes	To count results and not show you questions twice	Only you see how you voted; others see totals only
Guest votes (if you vote without an account)	After you confirm you're 18 or older, we create an anonymous guest account, kept signed in by your browser, so your votes count once and you aren't shown the same questions again. It has no email, name or birthday. Guests can't ask or comment	Only you see how you voted; others see totals only
Daily step totals, for example "40 people opened Thmbz from a Reddit ad today and 12 voted"	To see where newcomers get stuck so we can make Thmbz easier to use	Only us. These are just counts: no cookies, nothing stored on your device, nothing that says who you are
Reports you make and people you block	To keep Thmbz safe and hide content from you	Only us. People you block aren't told
Notification settings for your devices	To send the notifications you turned on	Only us
Basic technical data (such as IP address and browser type) in server logs	To run, secure and fix the service	Only us and our service providers

Some settings (such as your topic filter and the questions you skipped) are stored only on your device. We don't use third-party analytics, and the Reddit ad pixel loads only if you accept cookies (see Cookies below).

How we use it

To run Thmbz: sign-in, the vote feed, results, comments and notifications.
To keep it safe: checking age, handling reports, automatically checking new posts with AI, removing content that breaks our Terms, and stopping abuse.
To share anonymous, combined statistics, for example "72% of voters said yes to white sneakers with a suit". These never identify you.
To tell you about important changes to Thmbz or this policy.
To give popular questions their own public web page that search engines like Google can show (see below).

Questions on Google

When you ask a question you can choose whether it "Can appear on Google once it has 10+ votes" (on unless you switch it off). If it's on, and the question has passed our checks and has at least 10 votes, it gets its own page on thmbz.com showing the question, its photo, the vote percentages and your username (never your profile picture). Search engines can then find and show that page.

Photos that show people (including faces, bodies or outfits being worn) are kept off these pages unless you also tick "My photo shows people, and that's OK on Google too". Our AI check decides whether a photo shows people.
You can turn it off at any time in Me → your question, or delete the question. The page then stops showing the question straight away and is removed from thmbz.com at our next site update. Search engines may take some days to drop their copy.

Where data-protection law requires a legal basis: we use your information to provide the service you signed up for (contract), to keep Thmbz safe and working (legitimate interests), and to meet legal obligations.

Who we share it with

We don't sell or rent your personal information. We use these service providers to run Thmbz, and they only process data on our behalf:

Supabase: database, sign-in, photo storage and the notification service.
Resend: sends sign-in codes by email.
Anthropic: its Claude AI automatically checks new questions, photos and comments against our community rules.
Netlify: hosts the thmbz.com website.
Reddit (Reddit Ads): only if you accept cookies, to measure which of our ads led to a new account (see Cookies below).
jsDelivr: delivers part of the app's code to your browser.
Your browser's notification service (for example Google, Apple or Mozilla): delivers notifications you turned on.

We may also share information if the law requires it, to protect people's safety, or as part of a sale or merger of Thmbz (we'd tell you first). Some of these providers may store data outside your country, including in the United States, with the protections the law requires.

How long we keep it

We keep your information while your account is open. When you delete your account in the app (Me → Delete account), we delete your profile, birthday, optional details, questions, photos, comments, votes, reports, blocks and notification settings straight away. Copies in our providers' backups are removed automatically within about 30 days. Anonymous totals that can't identify you may remain.

Your rights

Depending on where you live (for example under GDPR in the EU/UK or CCPA in California) you can ask to access, correct, export or delete your information, or object to how we use it. You can delete your account yourself at any time in the app; for anything else, email support@thmbz.com and we'll reply within 30 days. You can also complain to your local data-protection authority. We don't sell or "share" personal information for advertising, as those terms are defined under California law.

Age

Thmbz is only for people aged 18 and over. If we learn that someone under 18 has an account, we'll delete it.

Cookies and similar storage

Always (needed to run Thmbz): your browser stores your sign-in and app settings (for example which questions you skipped and your cookie choice) on your device. These aren't used for advertising.
Only if you tap Accept: the Reddit Pixel sets cookies and tells Reddit that you visited Thmbz and, if you create an account, that an account was created, so we can see which of our Reddit ads work. Reddit receives technical details such as your IP address and browser, as it does for any Reddit ad. We don't share your questions, votes, email or birthday with Reddit.
If you tap No thanks, the Reddit Pixel isn't loaded at all. You can change your choice at any time with Cookie choices at the bottom of the Me tab.

Security

Data is sent over encrypted connections, access is restricted by database rules, and birthdays are kept in a separate table that the app can't read. No system is perfectly secure, so please don't post anything you'd regret others seeing.

Changes

If we change this policy we'll update the date above, and for important changes we'll tell you in the app or by email.