Short version
Tiny Design Shop tools run in your browser. We do not ask you to create an account, and we do not keep a long-term store of your images, edits, or tool files.
The main personal data we collect is site analytics — to understand which pages and tools are useful. We do not sell personal data or build advertising profiles from this site.
Organisation
This website is operated by HUEGRID PTE. LTD. (UEN 202407645K), #14-04, 160 Robinson Road, Singapore 068914, under the public brand Tiny Design Shop at tinydesignshop.com.
We handle personal data in line with Singapore's Personal Data Protection Act 2012 (PDPA).
Tool data stays local
- No user accounts on Tiny Design Shop.
- No long-term database of tool inputs — images, blur regions, exports, or other edits.
- Secure Photo Blur processes images entirely in your browser. Your source image is not uploaded to our servers.
- We do not receive or store payment card details on our own servers.
Analytics and hosting logs
Google Analytics, PostHog, and Cloudflare Web Analytics run on public pages. They may record page views, referring pages, device and browser type, coarse location, and similar technical signals. Analytics providers may use cookies or similar technologies.
When a tool reaches a completed-use moment, such as a copy or export, Tiny Design Shop may retain a bounded list of up to five distinct Cloudflare-derived country codes and timestamps for up to seven days to show country-level recent activity. This list contains coarse country-only data and does not include a name, city, IP address, personal identifier, file, tool input, or exported content.
If that recent-activity list is empty, the homepage may temporarily use a manually reviewed, aggregate list of top countries from Cloudflare traffic analytics. Only the country codes are published; no visitor-level analytics record or identifier is copied into the site.
We use analytics to understand site usage and improve pages and tools. We do not use it to sell your data.
Our hosting provider (Cloudflare) also keeps standard server and security logs, such as IP address, request time, and browser user-agent, for operations and abuse prevention.
HTML Slide Presenter — temporary only
If you use HTML Slide Presenter, you may upload one HTML deck so we can deliver a temporary presenter link. The deck is held only for the expiry you choose (30 minutes, 3 hours, or 1 day), then deleted automatically.
This is session delivery, not long-term collection. Do not upload content you are not allowed to share, including other people's personal data, unless you have permission.
Asset Extractor (Tiny Extract) — proxy fetch
If you use Asset Extractor, the webpage URL you paste is sent to our Cloudflare Worker so it can fetch the public page and any linked assets. HTML and asset bytes pass through transiently for extraction — we do not store page contents or asset bodies, and we do not log fetched content.
Analytics may record that an extract happened (and coarse country), not what you downloaded. A Cloudflare Turnstile bot check runs before proxy fetches, similar to HTML Slide Presenter uploads when CAPTCHA is enabled.
When you leave our site
Some actions open third-party services that handle their own data:
- Gumroad — if you buy a digital drop, Gumroad processes checkout and delivery under Gumroad's privacy policy.
- Buy Me a Coffee — if you open support or donate, BMC handles that interaction under its privacy policy.
- Affiliate or template links — third-party sites (for example Carrd) have their own policies.
Analytics, hosting, CAPTCHA (when enabled for presenter uploads), and temporary presenter storage may involve service providers outside Singapore. We use providers that apply appropriate contractual or standard safeguards for cross-border processing.
How long we keep data
- Presenter decks: until your chosen session expiry, then deleted.
- Analytics: per Google, PostHog, and Cloudflare retention settings.
- Country-level recent tool activity: up to 7 days.
- Hosting logs: per Cloudflare operational retention.
- We do not archive user tool content after sessions end.
PDPA rights and complaints
Under the PDPA you may request access to, or correction of, personal data we hold about you, or withdraw consent where consent is the basis for processing.
You may also contact the Personal Data Protection Commission (PDPC) at pdpc.gov.sg if you have a complaint.
Cookies and similar technologies
Analytics services may set cookies or use similar browser storage. Singapore law does not require a separate cookie consent banner for this use, but we disclose it here so you know what runs on the site.
Not aimed at minors
Tiny Design Shop is not directed at children under 18. Purchases require a buyer who can enter a contract under Singapore law.
Updates to this policy
We may update this page when our practices change. The effective date at the top will change when we do. Material changes may also be noted on the site.
Site use is covered by our Terms of Service. For a PDPA cross-check, Singapore's PDPC offers a free Data Protection Notice Generator. Consider professional legal advice if you need a formal review.
Data protection contact
For privacy questions, access requests, or corrections, contact our data protection officer:
hello [at] tinydesignshop [dot] com
HUEGRID PTE. LTD., #14-04, 160 Robinson Road, Singapore 068914