Privacy notice

The controller of your personal data is blogspace.

Write to us at contact@blogspace.me about anything in this notice.

blogspace support can see your account's email address, plan, billing status and hostnames, to provide the service you signed up for (LGPD art. 7 V; GDPR art. 6(1)(b)) and to handle support, billing and abuse under our legitimate interest (LGPD art. 7 IX; GDPR art. 6(1)(f)); what support views and does is logged with your account's identifiers, never with email addresses or names, and kept for as long as the service runs.

blogspace also counts when each publication publishes: counts and dates only, never a title, a text, a photograph or anything else anyone writes. We use them to understand whether the product works for its customers, under our legitimate interest (LGPD art. 7 IX; GDPR art. 6(1)(f)). They are deleted when the publication is deleted.

While sign-ups are closed, you can ask us to tell you when they open. We store the email address you give us, the interface language the page was in when you sent it, and the three optional answers you may write about what you publish, where your readers find you today and the languages you publish in. No IP address is stored with your entry: addresses are held only briefly, in memory, to limit repeated submissions.

Telling you when you can sign up, and understanding who is interested so that we can write back to you about your answers — steps taken at your request before entering into a contract (LGPD art. 7 V; GDPR art. 6(1)(b)). We send you no confirmation email and no marketing: the only messages you get are the one telling you sign-ups are open and any personal reply we write.

12 months from the last time you sent the form, or sooner if you ask us to remove you. The list is also emptied when sign-ups open for good.

Only blogspace's operator can see the list. It is stored with the hosting provider named below, along with the rest of the service, and shared with nobody else. Every view and every export of the list is logged, and that log never holds your email address.

To have your entry deleted before then, write to contact@blogspace.me.

These providers process personal data on our behalf, only to run the service:

• Oracle Cloud, where the service and its database are moving, in São Paulo, Brazil. Until then they run on a server we operate ourselves.
• Oracle Email Delivery, which sends account emails such as invitations and password resets.
• Cloudflare, for DNS, for storing the photos and files you upload, and for forwarding messages sent to our contact address.
• Cloudflare, which for now carries every request to blogspace.me and to every publication on it before the request reaches our server, and so sees your IP address along with the request.
• Stripe, for payments.

Cloudflare and Stripe operate worldwide, including in the United States, so using them involves transferring personal data outside Brazil and outside the European Economic Area, under the safeguards those providers offer for such transfers, such as standard contractual clauses.

Under the LGPD (art. 18) you may ask us to confirm whether we process your data; to give you access to it; to correct it; to anonymise, block or delete data that is unnecessary, excessive or processed unlawfully; to port it to another provider; and to tell you whom we share it with.

Under the GDPR (arts. 15–22) you may ask us for access to your data, to correct it, to erase it, to restrict its processing and to receive it in a portable format, and you may object to processing based on our legitimate interest. We make no decisions about you by automated means alone.

To exercise any of these rights, write to contact@blogspace.me.

The owner of a publication can also export all of its posts and media from the publication's admin, on any plan and without asking us.

If you believe we process your data unlawfully, you have the right to complain to Brazil's National Data Protection Authority (ANPD) or, in the European Economic Area, to the data protection supervisory authority where you live or work, or where the infringement took place.

blogspace.me sets no cookies and uses no analytics, tracking or advertising. Signing up and joining the waitlist happen on app.blogspace.me, which sets only the cookies strictly necessary for them — the token that protects its forms against cross-site requests, the cookie that keeps you signed in and the interface language you chose — each set for that host alone, and none for analytics or advertising. Your publication's admin uses only the cookies strictly necessary to protect its forms and keep you signed in.

help.blogspace.me, the help centre, sets no cookies and keeps no record of your visit.

Your browser may keep two values in its local storage, each only when you choose it, and neither is ever sent to us: blogspace-locale, the interface language you picked, and blogspace-theme, the light or dark theme you picked.