Privacy Policy
1. Controller
Ömer Gülen
Bessemerstraße 51, 1. OG
12103 Berlin
Deutschland
E-Mail: hi.zoomblr@gmail.com
2. What We Collect and Why
a) Server and access logs
When you visit Zoomblr, Vercel (our hosting provider) automatically records your IP address, browser type, operating system, referring URL, and time of access. This is necessary for the technical operation of the service (Art. 6 para. 1 lit. f GDPR — legitimate interest). Logs are retained for up to 30 days.
b) Usage data (trending)
When you view a Tumblr blog on Zoomblr, we increment a per-blog view counter in our database (Upstash Redis) to generate the trending and "most viewed" lists (by day, week, month, and all-time). To stop a single visitor from inflating a blog's count, we store a salted, non-reversible SHA-256 hash of your IP address for 24 hours, used solely as a deduplication marker — the raw IP is never stored, and the hash cannot be used to identify you. The trending data itself consists only of blog usernames and view counts. Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in showing popular content).
c) Analytics
We use Vercel Analytics, a privacy-friendly, cookieless analytics service provided by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel Analytics does not set cookies and does not track you across websites. Data collected includes page views, referring URL, country, and device type in aggregated form. Legal basis: Art. 6 para. 1 lit. f GDPR.
For more information see vercel.com/legal/privacy-policy.
d) Advertising (Google AdSense)
We use Google AdSense to display advertisements. AdSense is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google AdSense sets cookies and similar tracking technologies to personalise ads.
For visitors in the EEA, the United Kingdom, and Switzerland, consent for advertising cookies is collected through Google's certified Consent Management Platform (Funding Choices), shown on your first visit. Legal basis for personalised advertising: Art. 6 para. 1 lit. a GDPR (your consent). If you do not consent, ad cookies are not set. You can review or withdraw your choice at any time via the "Privacy & cookies" link in the footer.
To keep advertising away from mature content, ads are not shown on the post feed or tag feeds, nor on any blog flagged as mature — only on Zoomblr's own pages and on safe blog avatar pages.
For more information see policies.google.com/privacy.
e) Speed Insights
We use Vercel Speed Insights to monitor real-user performance metrics (page load times, Core Web Vitals). This service is cookieless and processes data in aggregated form. Legal basis: Art. 6 para. 1 lit. f GDPR.
3. Third-Party Services
| Service | Provider | Purpose | Privacy Policy |
|---|---|---|---|
| Vercel | Vercel Inc., USA | Hosting & CDN | vercel.com/legal/privacy-policy |
| Upstash Redis | Upstash Inc., USA | Trending data storage | upstash.com/trust/privacy.pdf |
| Google AdSense | Google Ireland Ltd. | Advertising | policies.google.com/privacy |
| Vercel Analytics | Vercel Inc., USA | Cookieless analytics | vercel.com/legal/privacy-policy |
| Tumblr API | Automattic Inc., USA | Fetching public blog data | automattic.com/privacy |
Data transfers to the USA take place on the basis of Standard Contractual Clauses (Art. 46 para. 2 lit. c GDPR).
4. Your Rights
Under GDPR you have the right to:
- Access (Art. 15 GDPR): request a copy of the data we hold about you
- Rectification (Art. 16 GDPR): request correction of inaccurate data
- Erasure (Art. 17 GDPR): request deletion of your data
- Restriction (Art. 18 GDPR): request restricted processing
- Objection (Art. 21 GDPR): object to processing based on legitimate interest
- Portability (Art. 20 GDPR): receive your data in a structured format
To exercise any of these rights, contact us at hi.zoomblr@gmail.com.
5. Right to Lodge a Complaint
You have the right to lodge a complaint with the supervisory authority responsible for our place of business:
Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI)
Friedrichstr. 219
10969 Berlin
www.datenschutz-berlin.de
6. Removal Requests
If you want your Tumblr blog removed from Zoomblr, use the self-service removal form at zoomblr.com/remove. Removal is instant and permanent.
7. Data Retention
We retain anonymous trending data (blog usernames + view counts) indefinitely as it contains no personal data. The salted IP-hash deduplication markers and removal verification tokens both expire automatically after 24 hours. Server logs are deleted after 30 days.
8. Changes
We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of Zoomblr after changes constitutes acceptance.