Privacy

Last updated: July 10, 2026

Who is responsible

Tumblethorn operates this website and is responsible for the browser storage, contact form, and optional media described here. Adults can send questions and privacy requests through the Contact form.

Current free website

Visitors can read about books, open external music links, play a mini game, and color free pages. The website does not ask children to create an account, enter a name, or share contact details. The Contact form is intended only for adults, parents, and guardians.

Necessary browser storage

Necessary browser storage remembers your cookie choice and supports requested features such as game progress. It is used only to provide the website and its requested functions.

Optional YouTube video

The embedded YouTube video is off by default and loads only after a parent or guardian allows the YouTube category. When it loads, YouTube and Google may receive device, IP address, and usage information under their own privacy terms, including any international transfers they make. Tumblethorn uses YouTube's privacy-enhanced embed domain and does not use advertising cookies.

Consent and retention

Your YouTube choice is stored in your browser for up to 12 months, unless you clear browser data or change it first. You can withdraw or change it at any time through the Cookie settings link in the footer. Withdrawing permission stops the video from loading again on this site; it does not remove information already processed by Google or YouTube.

Adult contact form

The Contact form is for adults, parents, and guardians. It collects the sender's email address, selected topic, message, and an optional name so Tumblethorn can review and respond to the request. The form temporarily processes the sender's network address to prevent repeated spam submissions, but does not include that address in the delivered message. Please do not submit a child's personal details.

Messages are delivered through Tumblethorn's private SMTP mail service and are not used for marketing. Messages should be deleted when they are no longer needed for the request, normally within 12 months unless a longer period is required for a legal or security reason.

External links

Some buttons open Amazon, Spotify, Apple Music, Tidal, YouTube, and other external services. Their privacy terms apply when you visit them.

Your rights

Depending on the situation, you may ask to access, correct, erase, restrict, or object to processing of your personal data. You may also complain to the data protection authority in your country or region. For visitors in the EU or EEA, this can be the authority where you normally live, work, or believe an infringement occurred. The European Data Protection Board lists EU and EEA authorities.

Before future changes

If Tumblethorn adds memberships, payments, newsletters, accounts, advertising, or new analytics, this page and the consent choices must be reviewed and updated before launch.