Privacy policy

01 / Scope

This policy applies to the TimyBear website and its search, subscription, contact, collaboration and purchase-channel verification features. Third-party stores, social platforms and external links follow their own privacy policies.

02 / Information we may collect

Information you provide

• Email address provided for a subscription;
• Name, organisation, email, request and context provided for a contact or collaboration enquiry;
• Project material that you choose to upload or paste.

Website operation information

• Basic technical information such as page visits, browser and device type;
• Cookie and local-storage preferences;
• Logs used for security, troubleshooting and abuse prevention.

03 / How information is used

• To answer enquiries, organise collaboration requests and provide relevant information;
• To send brand messages that a user has requested;
• To maintain website security, investigate errors and improve usability;
• To measure visits or marketing only after the appropriate choice has been made.

Viewing a colour or character does not cause us to infer a fixed personality or other sensitive attribute.

04 / Sharing, service providers and retention

After launch, the site may use email, form, cloud-storage, content-management and visit-measurement services. Information is shared with bound service providers only as needed to provide the service. Personal information is not sold.

Retention periods should follow enquiry handling, contractual, security and legal needs. Information should be deleted or anonymised when it is no longer needed.

05 / Your choices and rights

• View and change Cookie preferences;
• Unsubscribe from email;
• Request access to, correction of or deletion of information you submitted;
• Withdraw consent or object where applicable law allows.

The request channel will be published once the formal privacy contact is confirmed.

06 / Children, updates and contact

The site is not intended to actively collect sensitive information from children. Any child-directed product, activity or form requires separate age, guardian-consent and data-minimisation work before launch.

Policy updates should show the new version and effective date. Material changes should be communicated clearly.