Privacy Policy

We collect the following information to provide and improve the Blogee service:

• Account information: name, email, and password (hashed, never stored in plaintext).
• Blog content: posts, replies, and images you upload to your blog.
• Usage data: page views and API request logs for rate limiting and abuse prevention.
• Commenter data: Google profile name, email, and avatar for verified comments via Google OAuth.

• To provide the blogging service (host your blog, serve your content).
• To enforce rate limits and prevent abuse of the platform.
• To send account-related emails (email verification, password reset).

We never sell your data or use it for advertising.

• All data is stored in PostgreSQL with Row-Level Security enabled — every query is scoped to your tenant.
• API keys (such as OpenAI keys) are encrypted at rest and never exposed in plaintext after initial save.
• Uploaded images are stored in tenant-isolated S3 buckets under tenants/<tenantId>/ key prefixes.
• Authentication uses signed JWT session cookies with httpOnly, secure, and sameSite flags.
• All connections to Blogee use HTTPS/TLS encryption.

• OpenAI: If you provide an API key, your post content is sent to OpenAI for AI translation, image generation, and metadata generation.
• Google OAuth: Used for commenter identity verification. Your readers' Google profile data (name, email, avatar) is used to display their identity on comments.
• AWS S3: Blog images are stored in Amazon S3 for reliable and fast delivery.

• Access, update, or delete your data at any time via your admin dashboard.
• Export your posts and replies.
• Delete your account and all associated data.
• Request a copy of your personal data by contacting us.

• blogee_session — JWT authentication cookie for admin dashboard access (httpOnly, secure, sameSite).
• blogee_visitor_identity — commenter identity cookie, tenant-host-scoped (httpOnly, secure).
• blogee_ui_locale — language preference cookie for the admin dashboard UI.

No tracking cookies. No third-party cookies.

• Account data is retained until you delete your account.
• Rate limit logs are automatically cleaned up periodically.
• Deleted posts and replies are soft-deleted (marked as deleted) and then permanently removed.

Blogee is not intended for children under 13. We do not knowingly collect personal data from children under 13.

If you have questions about this privacy policy, contact us at hello@blogee.tech. We respond within 48 hours.