Last updated September 2, 2026
Temblee is a marketplace where independent creators list design templates for buyers to browse and unlock. This policy explains what personal information we collect, why, who we share it with, and what control you have over it.
The controller of your personal information is:
Temblee
privacy@temblee.com
This policy applies to the Temblee website and services (the "Service"). It works alongside our Terms of Service. It does not cover third-party tools such as Canva, Figma etc. see Section 12.
| What | When | Notes |
|---|---|---|
| Email address, username, full name | Account registration | |
| Password | Optional, when you choose to set one, at registration or later in account settings | Stored only as a salted hash. We never store or have access to your plain-text password. |
| One-time sign-in code | Signing in, or creating an account, with an emailed code | Stored only as a salted hash, and deleted as soon as it is used or expires (within minutes). |
| Name, email address, profile photo | If you sign in with Google or Facebook | Received from that provider under the permissions you approve. We never receive your password for those accounts. |
| Profile photos, shop logos | Profile and shop setup | |
| Template preview images, inspiration post images, captions | Listing a template or posting inspiration | Uploaded images may carry embedded metadata, see Section 11. |
| Comments, likes, and messages to support | Posting, or contacting us | |
| Shop application details | Requesting to open a shop | Your proposed shop name, a link to your prior work, and the time you confirmed you are 18 or older. |
| Report reason and details | Reporting a problem with a template | Visible only to Temblee moderators, not shown to other users. We may share relevant details with the Template's Shop Owner to help resolve the issue. |
| Payout and tax details | Not collected, Temblee does not currently process payments. | See 2.3. |
Technical data is sent automatically by your browser. We use it to operate the site, diagnose errors, and detect abuse.
Temblee does not currently process payments. All templates are free to unlock. We do not collect, receive, or store payment card numbers, bank details, billing addresses, or payout information from anyone, and we have no payment processor.
If we introduce paid unlocks in the future, payments will be handled by a third-party payment processor that collects those details directly and acts as an independent controller under its own privacy policy. We would expect to receive only a transaction record, amount, currency, date, status, and a token or last-four digits and we will update this policy and give notice under Section 13 before any of that begins.
We do not collect special-category data (health, biometric, political, religious, or similar), and we ask that you not submit it in profiles, comments, or inspiration posts. We do not buy personal information from data brokers, and we do not track you across other websites.
For users in the EU, UK, and other jurisdictions that require a legal basis, ours are set out below.
| Purpose | Data used | Legal basis (GDPR Art. 6) |
|---|---|---|
| Create and maintain your account, authenticate sign-in | Account details, session data | Contract (Art. 6(1)(b)) |
| Sign you in, and create your account, without a password | Email address, one-time sign-in code | Contract (Art. 6(1)(b)) |
| Show your name and photo next to your posts, comments, and shop | Username, profile photo | Contract |
| Let you unlock templates and access what you've unlocked | Account details, unlock records | Contract |
| Operate a shop and list templates | Shop and listing data | Contract |
| Review inspiration posts and shop applications before they go live | Submitted content, account details | Legitimate interests, keeping the marketplace safe and lawful (Art. 6(1)(f)) |
| Investigate and act on reports about Templates | Report details, account details, the reported Template and Shop | Legitimate interests, keeping the marketplace safe and lawful (Art. 6(1)(f)) |
| Respond to copyright complaints and enforce our Terms | Account, content, activity data | Legal obligation (Art. 6(1)(c)) and legitimate interests |
| Detect and prevent fraud, abuse, and security incidents | Technical and activity data | Legitimate interests |
| Send service emails (password resets, unlock confirmations, moderation outcomes, changes to terms) | Email address | Contract |
| Keep records we are legally required to retain | Account and activity records | Legal obligation (Art. 6(1)(c)) |
| Send marketing emails about Temblee, if you opt in | Email address | Consent (Art. 6(1)(a)) withdrawable at any time |
| Diagnose errors and improve the Service | Technical and activity data, in aggregate | Legitimate interests |
| Understand how the Service is used, and which pages and templates people find | Aggregate analytics: page visited, referring page, browser, operating system, device type, country | Legitimate interests, understanding and improving what we offer (Art. 6(1)(f)) |
Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights and freedoms. You may object at any time, see Section 8.
We do not use your personal information or your uploaded content to train machine learning models, and our service providers are contractually prohibited from doing so.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
We share it only with the following recipients, and only as needed:
Our service providers act as processors on our instructions under written agreements, and may not use your data for their own purposes.
Some information is public by design:
Your email address, full name (unless you use it as your display name), password, unlock history, and any reports you file or that are filed about your templates are not shown to other users. Shop Owners see aggregate unlock data, not the identities of individual Buyers.
Assume that anything you post publicly may be seen, copied, or cached beyond Temblee's control.
Temblee uses a single essential session cookie to keep you signed in. It contains a session identifier, is set Secure, and SameSite=Lax, and expires after 24 hours by default, or up to 30 days if you choose "Remember me" at sign-in.
We do not use advertising cookies, cross-site tracking pixels, or third-party analytics cookies.
Our analytics are deliberately cookieless (see Section 4). That is why you see no cookie consent banner on this site: nothing non-essential is stored on your device, so there is nothing to consent to.
Because the session cookie is strictly necessary to provide a service you requested, it does not require consent under the ePrivacy Directive. Blocking it will prevent you from signing in.
Third parties may set their own cookies if you sign in through Google or Facebook those are governed by their policies.
Your information is stored on servers located in EU region.
That includes the aggregate analytics described in Section 4: our analytics provider processes them on EU infrastructure, so that data does not leave the EU either.
| Data | Retention |
|---|---|
| Account data | While your account is active |
| Uploaded content (profile photos, template previews, inspiration posts) | While your account is active, or until you delete the content |
| Public comments | While your account is active, on deletion, anonymised so replies still make sense |
| One-time sign-in codes | Deleted as soon as they are used, otherwise they expire within 10 minutes |
| Server logs and technical data | 30 days |
| Aggregate analytics data | 6 months |
| Records of suspensions, bans, template reports, and copyright complaints | 3-6 years, to enforce our repeat-infringer and abuse policies |
| Closed shops (logo, templates, and preview images that Buyers unlocked) | Kept while any Buyer still has access, so their unlocks keep working. Templates nobody unlocked are deleted when the shop closes. The original shop name is kept as an internal record, and the link to your account is removed when you delete it. |
| Backups | Deleted data persists in encrypted backups for up to 30 days before being overwritten |
After an account is deleted we retain only what is described above. Everything else is deleted or irreversibly anonymised.
If you are in the EU, UK, or Switzerland, you have the right to:
We do not carry out automated decision-making that produces legal or similarly significant effects.
California residents may request to know the categories and specific pieces of personal information we have collected, the purposes, and the categories of third parties it was disclosed to, to delete personal information, to correct inaccurate personal information and not to be discriminated against for exercising these rights.
We do not sell or share personal information as those terms are defined under the CPRA, and we have not done so in the preceding 12 months. Account creation requires you to be at least 13 (Section 10), and we do not knowingly collect personal information from anyone younger. Because we do not sell or share personal information at all, this applies equally to any minor's information we hold.
Other US state privacy laws including those of Virginia, Colorado, Connecticut, Utah, and Texas grant broadly similar rights, which we honour for residents of those states.
Email privacy@temblee.com from the address on your account, or use account settings where the feature exists. We will respond within 1 month, extendable where a request is complex, we will tell you if we need an extension. We may ask you to verify your identity. You may use an authorised agent where the law permits, we may ask for proof of authorisation.
Exercising these rights is free unless a request is manifestly unfounded or excessive.
We protect your information with measures including: encryption in transit (HTTPS/TLS) passwords stored as salted hashes, access controls limiting staff access to what their role requires and regular dependency updates and logging of administrative actions.
No system is completely secure, and we cannot guarantee absolute security. If a breach affects your personal data and poses a risk to your rights, we will notify you and the relevant supervisory authority as required by law under the GDPR, within 72 hours of becoming aware, where feasible.
Keep your password confidential, use a unique one, and tell us at security@temblee.com if you suspect unauthorised access.
Temblee's age requirements are set out in our Terms of Service, Section 2: at least 13 to create an account and buy or unlock Templates, and at least 18 to open a shop, which we require you to explicitly confirm as part of the shop application and record the time of that confirmation.
We do not knowingly collect personal information from anyone under 13. If you believe someone under 13 has given us personal information, or that a shop was opened by someone under 18, contact privacy@temblee.com and we will investigate and delete the account and its data where appropriate.
Photographs you upload may contain embedded metadata such as camera model, timestamp, and GPS coordinates.
Photos over about 0.9 MB are automatically recompressed on upload, which removes this metadata in the process. Smaller photos may be uploaded as-is and can retain their original metadata. If you don't want to share a photo's location, remove that metadata yourself before uploading, or crop/re-save the image first.
Unlocking a template gives you a link to open the design in the tool it was made with for example, Canva, Figma etc. Following that link takes you to a third-party service governed by its own privacy policy. We do not control what that service collects, and this policy does not cover it. You may need your own account with that service to use a template.
We may update this policy as Temblee changes. The "Last updated" date at the top always reflects the current version.
For material changes a new category of data, a new purpose, or a new category of recipient we will give at least 30 days' notice by posting the updated policy and emailing you at the address on your account. Where a change requires your consent under applicable law, we will ask for it before the change takes effect.
Questions, requests, or complaints about this policy:
Temblee
privacy@temblee.com
If you are not satisfied with our response, you may complain to your local data protection authority.