Privacy Policy

Last updated: 14 October 2025

1. Introduction

Welcome to thumb.onl. We value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (the “Site”) and use our services.
By accessing or using the Site, you agree to the terms of this Privacy Policy. If you do not agree with or accept any part of this Privacy Policy, please do not use our Site.

2. Information We Collect

We may collect personal and non-personal information about you when you use our Site, including:

a) Information You Provide Directly

Account Information: If you register or sign up (e.g., create an account, subscribe to a plan), we may collect your name, email address, username, password, and other contact details.

Payment Information: When you subscribe or make a payment, we collect billing information (e.g., credit card number, billing address) via our payment processor.

User Content / Prompts: When you input prompts, upload assets, or create thumbnail requests, we may process or store those inputs.

Support / Communications: If you contact us (e.g., via email or support forms), we may collect your messages, contact details, and related information.

b) Automatically Collected Information
When you visit or use the Site, we automatically collect certain information, including:

Usage Data: Pages visited, time spent, interactions, features used, errors encountered, etc.

Device & Technical Data: IP address, device type, browser type/version, operating system, screen resolution, mobile carrier, unique device identifiers, and settings.

Cookies & Tracking Technologies: We use cookies, web beacons, pixel tags, and similar technologies to collect data about your browsing behavior, preferences, and to help with analytics, security, and advertising.

c) Third-Party Sources
We may obtain information about you from third parties, such as:

Analytics providers (e.g., Google Analytics)

Payment processors

Advertising / marketing services

Social media platforms, if you connect via social login

3. How We Use Your Information

We use the collected information for purposes including, but not limited to:

Providing, maintaining, and improving our services.

Processing your transactions, subscriptions, and billing.

Personalising your experience on the Site.

Communicating with you (e.g., confirmations, updates, support).

Monitoring usage and analysing trends to improve functionality.

Detecting, preventing, and addressing technical or security issues.

Enforcing our Terms of Service, legal rights, or as otherwise permitted or required by law.

Marketing, advertising, and promotional purposes (where you have given consent).

4. Legal Bases for Processing (If in the EU / GDPR Context)

If you are in the European Economic Area (EEA), we rely on one or more of the following legal bases to process your personal data:

Consent: where you have given clear consent for us to process your personal data for specific purposes (e.g., cookies, marketing).

Contractual Necessity: processing necessary to fulfill our contract with you (e.g., providing the services you requested).

Legal Obligation: for compliance with legal obligations.

Legitimate Interests: for purposes such as fraud prevention, site security, analytics, or improving our services — provided your rights do not override those interests.

5. How We Share Your Information

We may share your information as follows:

Service Providers / Vendors: with third parties who perform services on our behalf (e.g., payment processors, hosting providers, analytics, email delivery).

Affiliates / Subsidiaries: to operate and maintain our business.

Legal / Compliance: when required by law, subpoena, regulation, or governmental request, or to protect rights, property, or safety.

Business Transfers: if we reorganise or sell parts of our business, your data may be transferred as part of that transaction.

Aggregated / De-identified Data: we may share aggregated or anonymised data which does not identify you personally.

6. Cookies & Tracking Technologies

We and our partners use cookies and similar technologies for purposes such as:

Essential Cookies: required for core functionality (e.g., login, navigation).

Performance / Analytics Cookies: to measure usage, performance, and gain insights (e.g., via Google Analytics).

Functional Cookies: to remember preferences or settings.

Advertising / Targeting Cookies: to deliver relevant ads, measure ad performance, or retarget users.
You may choose to block or disable cookies via your browser settings; however, this may impact the full functionality of the Site.

7. Data Retention

We retain your personal data only for as long as is necessary for the purposes described in this policy (or as required by law). When no longer needed, we securely delete, anonymise, or aggregate the data.

8. Security

We implement reasonable technical and organisational measures to protect your information from unauthorised access, loss, misuse, alteration, or destruction. However, no method of transmission or storage over the Internet is completely secure, so we cannot guarantee absolute security.

9. Your Rights

Depending on your jurisdiction, you may have the following rights:

Access: request access to your personal data.

Correction / Rectification: ask to correct inaccurate or incomplete data.

Deletion (“Right to be Forgotten”): request deletion of your data.

Portability: receive a copy of your data in a structured, machine-readable format.

Restriction of Processing: ask us to limit processing in certain circumstances.

Objection: object to processing (e.g., direct marketing).

Withdraw Consent: where processing is based on consent, you may withdraw it.

Lodge a Complaint: you may complain to your local data protection authority.
To exercise these rights, contact us using the details in the “Contact Us” section below. We may require verification of identity before acting on requests.

10. Children’s Privacy

Our services are not directed to children under the age of 13 (or as required by local law). We do not knowingly collect personal data from children under that age. If you believe we have collected such data, please contact us and we will delete it.

11. International Transfers

Your data may be transferred to, stored in, or processed in countries other than your own (including servers outside your country). When we do so, we take steps to ensure appropriate safeguards (e.g., standard contractual clauses, encryption) to protect your data.

12. Third-Party Links & Services

Our Site may contain links to third-party websites or services not operated by us. We are not responsible for their privacy practices. We encourage you to review their privacy policies before using them.

13. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we do, we will revise the “Last updated” date. If changes are material, we may provide notice (e.g., via email or prominent notice).
Your continued use of the Site after changes indicates your acceptance of the updated policy.

14. Contact Us