Privacy Policy

Tumblry is a Tumblr publishing service that lets people connect a Tumblr account through Tumblr's official authorization flow and publish approved content through the Tumblr API.

We do not collect Tumblr passwords. We only store the access needed to publish content that has been prepared and approved in Tumblry.

When you connect a Tumblr account, we may store:

• your Tumblr username and connected blog metadata;
• OAuth access and refresh tokens issued by Tumblr;
• post content, captions, tags, and publishing status;
• Tumblr post IDs and URLs after publishing;
• operational logs needed to diagnose publishing issues.

We use this information only to:

• connect and verify Tumblr accounts;
• publish approved content to connected Tumblr blogs;
• refresh OAuth access when tokens expire;
• record publishing status and Tumblr post details;
• debug failed or delayed publishing requests.

We do not sell data, run advertising profiles, or use connected Tumblr account data for unrelated purposes.

Tumblry uses Tumblr OAuth scopes such as basic, write, and offline_access. These allow the service to identify the connected Tumblr account, publish posts that were approved for publishing, and refresh access without requiring a login for every post.

You can revoke access from Tumblr account settings at any time.

OAuth tokens are stored on the server and encrypted before being saved. They are never exposed to the browser and are never written to public documentation, chat, or client-side code.

Tumblry runs over HTTPS. Production infrastructure access is restricted to authorized operators.

Disconnecting removes stored OAuth tokens for the connected Tumblr account from Tumblry. Published Tumblr posts are not deleted by disconnecting.

For questions about this Privacy Policy or connected account data, contact Tumblry at help@tumblry.xyz.