Privacy Policy
This policy covers the Tinyfloor website (tinyfloor-landing.vercel.app). Tinyfloor is run by an independent developer in South Korea.
What we collect
- Your email address, only if you join the waitlist. With it we record the page language you used and the time you signed up.
- Nothing else on this website. There are no accounts, no cookies and no advertising trackers. The community site Tinyfloor Hub has its own, smaller set, described below.
Why
To email you when Tinyfloor launches and to send you the early-bird offer. We do not use your email for anything else, and we never sell it.
How long we keep it
Until we have sent the launch and early-bird emails, and no later than December 31, 2027. Then we delete it. If you ask, we delete it sooner.
Services that handle it
- Web3Forms (web3forms.com) passes the waitlist form to our inbox by email, together with the IP address it was sent from.
- Gmail (Google, United States) is the inbox where the email is kept.
- Vercel (United States) hosts the website. Like any web host it processes technical request data such as IP addresses to serve pages. Vercel Web Analytics counts page visits without cookies and without identifying you.
- Google Fonts (Google, United States) serves the fonts. Your browser requests them directly, which sends your IP address to Google.
Your email is sent to these services in the United States when you submit the form.
Your rights
You can ask to see, correct or delete your email, or to leave the waitlist, at any time. Email us and we will act within 10 days. You do not have to join the waitlist to use the website.
The Tinyfloor app
The app keeps your agents' activity and reports as files on your own computer. It does not send them to us. Once a day it downloads the public list of approved Hub teammates; nothing goes the other way.
Tinyfloor Hub (hub.tinyfloor.app)
The Hub is a community site where people share Claude Code agents and skills. Browsing, copying and downloading need no account.
- If you sign in with GitHub, we store your GitHub login name, your avatar URL and a GitHub user id, so that what you share, like and comment is shown under your name. We do not receive your GitHub password or email.
- What you share (the agent or skill file, its title, description, field and license), your likes and your comments are public by design, together with your login name. A maintainer reads every submission before it is listed.
- Counts of downloads and likes per item. Downloads are counted without identifying who downloaded.
- Supabase (supabase.com; project hosted in the Asia-Pacific region, company in the United States) stores this data and handles the GitHub sign-in. GitHub (United States) performs the sign-in itself.
- How long: until you delete the item, comment or like yourself, or ask us to delete your account. Deleting your account removes everything you shared. Email us and we act within 10 days.
Instagram posting (optional)
If you connect an Instagram business or creator account in the app (Settings → Publish), the app can post the reels it made for you. Nothing happens unless you connect.
- Your Instagram login (an access token Meta issues for 60 days) is kept only in your computer's keychain (macOS Keychain or Windows Credential Manager). Our server passes it to your app once during sign-in and keeps no copy; renewals (every 50 days) go straight from your app to Meta. Your Instagram user name and the token's expiry date are saved in a file on your computer.
- The video or images you post are uploaded to our server for Instagram to fetch. They sit there for at most one hour behind a private, expiring link; the app deletes them as soon as Instagram has them, and any file that was not deleted is erased automatically after 24 hours.
- Our server runs on Cloudflare Workers and R2 (United States). It has no database and writes no logs. It talks only to Meta's Instagram API. Posting itself goes straight from your app to Meta (Instagram, United States), whose own privacy policy applies to what you publish.
- Captions and hashtags do not pass through our server. The app sends them directly to Meta (graph.facebook.com).
- No logs of our own: we keep no logs, but our host Cloudflare handles ordinary network traffic (such as IP addresses) when requests reach the server, and Cloudflare's privacy policy applies to that.
- Your agents' reports, your other files and your code are never sent.
- Disconnect in the app to delete the token from your computer. You can also remove Tinyfloor in Instagram (Settings → Website permissions → Apps and websites). How to ask for deletion: Instagram data deletion.
Contact
Privacy contact: the Tinyfloor operator, jin.come.up.business@gmail.com
If this policy changes, we will update this page and its date.