At Tumblr, protecting and preserving the privacy of our community members has always been a top priority (right next to curating the internet’s best memes). That’s why, in accordance with privacy regulations, we go to great lengths to provide all members of the Tumblr community and staff with a plain view of our security and privacy practices. This report includes a comprehensive overview of requests, and provides an outline of the user data removal and retrieval process.
The information below represents the number of requests we received from January 1, 2023 – June 30, 2025.
Select a time period from the menu for more detailed information.
Access Requests
Notes
- Automattic honors Access Requests from any source or location. It does not restrict Access Requests to individuals residing in certain locations. Automattic has never denied an Access Request from one of its users.
- We do not require individuals who submit Access Requests to disclose their location as part of their request.
Deletion Requests
Notes
- The deletion of data is tied to our account closure process, which is always self-service and can only be triggered by the logged in account owner or administrator. Because the process is self-service, we do not have data on the full number of users who desired to delete their personal information from our service. The above numbers only represent the total number of deletion requests opened privately with our support team.
- Because deletion is self-service, Automattic does not deny deletion requests for any verified and logged in account owners. Deletion requests submitted to Support are occasionally denied when an individual has lost access to their account and is unable to verify their ownership.
- Automattic vigorously defends the speech rights of its site owners. We do not honor deletion requests submitted by third parties in an attempt to censor the content published on our service unless the content is found to violate our Terms of Service. We will, upon request of the third party, pass complaints on to site owners (who are the controllers of the data published on their own site).
- When an account is closed, we retain the account data for 30 days, then fully purge it from our systems. For this reason, the length of time it takes to honor a deletion request is always 30 days.
Transparency Report 