Privacy policy
1. Data controller and contact
The controller for data connected with the service is the operator of TellJar at telljar.online. Privacy contact: privacy@telljar.online. General contact: support@telljar.online. TellJar does not publish invented operator details; information required by law for a specific payment or settlement is provided in the relevant process and documents.
2. Data we may process
Depending on how TellJar is used: note and reply content, account email, account and session identifiers, profile information voluntarily supplied by the user, country and language, card and sticker layout, optional photos, private messages to TellJar, moderation reports, technical security data such as IP address, user-agent and request time, and transaction information returned by Stripe. TellJar does not receive the full payment-card number.
3. Sensitive content
Because of TellJar's purpose, a user may voluntarily describe personal matters that could include sensitive information. Do not include information that identifies you or another person unless necessary. TellJar does not require health, belief, sexual-life or other special-category data to create an account or use core functions.
4. Purposes
Data is processed to provide the service and accounts, deliver replies, process payments and digital entitlements, moderate content, maintain security, handle reports and complaints, comply with legal obligations and establish or defend legal claims. Public-profile and social-media data is published only after the user enables a public profile. Advertising or analytics technologies that require consent are enabled only after the required consent is obtained.
5. Providers and recipients
TellJar uses Cloudflare for hosting, database, security and AI translation functions, Stripe for payments, and Google services used for verification emails and interface assets. If Google AdSense is enabled, Google and ad-technology providers disclosed through the consent mechanism may process data according to the user's choices and their own policies. TellJar does not sell its account database to advertisers.
6. International transfers
Some infrastructure, payment, email or advertising providers may process data outside Poland or the EEA. Where this happens, the transfer mechanisms and safeguards used by the relevant provider and required by applicable law apply.
7. Retention
Account data is kept until account deletion or for as long as needed to provide the service and meet legal obligations. Active sessions have limited validity and verification codes are short-lived. Public content may remain until removed, hidden or no longer lawfully retained. Reports, security data and transaction information may be retained longer where necessary to handle disputes, prevent abuse or comply with legal and accounting obligations.
8. User rights
Where applicable, users may request access, correction, deletion, restriction, portability, object to processing and withdraw consent without affecting prior lawful processing. Requests can be sent to privacy@telljar.online. Users may also lodge a complaint with the competent data-protection authority.
9. Minors
The public version of TellJar is intended for users aged 16 or over. Where local law requires parental consent, users should obtain it before using functions based on consent or entering a contract.
10. Security
TellJar uses password hashing, HttpOnly/Secure/SameSite session cookies, request limits, moderation and server-side entitlement checks. Creator photos are redrawn and compressed before upload, which removes typical EXIF/GPS metadata but not information visible in the image.
11. Public profile and social media
Profile name, avatar, country and Instagram, TikTok or YouTube links are optional. The public profile is off by default. When enabled, information shown on the profile may be available to anyone with its link. The email address is not published. Anonymous notes and replies do not automatically link to the public profile.
12. Advertising, Google and consent
TellJar may use Google AdSense after the site is approved and ad serving is enabled. Google and its advertising technology partners may use cookies, IP addresses, device signals and similar identifiers in connection with ad delivery according to the visitor's choices and applicable law. Other companies may place or read cookies in the browser, or use similar technologies, as a result of ads being served. More information is available at How Google uses data from sites and apps that use its services.
In the main app, ad code is intended for accounts without active Ad-free access. For visitors in the EEA, UK and Switzerland, TellJar should use a consent-management mechanism that meets Google requirements and applicable law. Where consent is required, visitors should be able to accept, refuse and later change their choice.