Privacy Policy

Your privacy matters to us. This Privacy Policy explains what information Blog CMS collects, why we collect it, how we use and share it, and the choices and rights you have. We've tried to keep it plain-English and free of legalese.

Who we are

Blog CMS (operated via useblogcms.com) is a managed blog publishing platform. You write posts in our editor and deploy fast, static blogs to your own domain. In this policy, "we," "us," and "Blog CMS" refer to the service operator, and "you" refers to anyone who creates an account or uses the service.

Information we collect

We collect only what we need to run the service:

• Account information. When you sign up, we collect your name and email address. We use these to identify your account, log you in, and communicate with you.
• Your content. We store the blogs, posts, pages, images, and site configuration you create so we can host and serve them. This content belongs to you.
• Billing information. When you purchase a plan, payment is processed by Stripe. We do not store or have access to your full card numbers. We retain limited records such as plan type, transaction identifiers, and billing status.
• Cookieless analytics. Blog CMS includes built-in analytics that are privacy-first and cookieless. They measure aggregate traffic to your published blogs — for example page views, referrers, and country — without tracking or profiling individual visitors and without setting tracking cookies. We do not build advertising profiles or follow visitors across sites.
• Transactional email. We send account and service emails (for example sign-in, billing receipts, and important notices) through our email provider.

Cookies

We keep cookies to a minimum. We use only essential session cookies that are necessary to log you in and keep you authenticated. Our analytics set no cookies at all. We do not use advertising, marketing, or third-party tracking cookies.

How we use information

We use the information above to:

• Provide, operate, and maintain the service, including hosting and serving your blogs.
• Authenticate you and keep your account secure.
• Process payments and manage subscriptions, trials, and renewals.
• Send transactional and service-related email.
• Provide aggregate traffic analytics to you about your own blogs.
• Respond to support requests and communicate about your account.
• Detect, prevent, and address abuse, fraud, or technical problems.
• Comply with our legal obligations.

Legal bases for processing

Where data protection laws such as the GDPR apply, we rely on the following legal bases: performance of a contract (to provide the service you signed up for), legitimate interests (to secure, maintain, and improve the service and prevent abuse), consent (where we ask for it), and compliance with legal obligations.

Sharing and sub-processors

We do not sell your personal data. We share information only with service providers ("sub-processors") who help us operate Blog CMS, and only as needed:

• Stripe — payment processing.
• Our hosting / CDN provider — infrastructure to store and serve your account data and published blogs.
• Our email provider — delivery of transactional and service email.

These providers are bound by their own terms and data protection commitments and may only use the data to provide services to us. We may also disclose information if required by law, to enforce our agreements, or to protect the rights, safety, and property of Blog CMS, our users, or the public.

International transfers

Our providers may process data in countries other than where you live. Where required, we rely on appropriate safeguards (such as standard contractual clauses) to protect personal data transferred across borders.

Data retention

We keep your account and content for as long as your account is active or as needed to provide the service. If you delete content or close your account, we remove the associated data within a reasonable period, except where we must retain certain records (for example billing and tax records) to meet legal obligations or resolve disputes. Aggregate, cookieless analytics that do not identify individuals may be retained for trend reporting.

Your rights

Depending on where you live, you may have rights under laws such as the GDPR and CCPA, including the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data ("right to be forgotten").
• Export a copy of your data in a portable format.
• Object to or restrict certain processing, and withdraw consent where processing is based on consent.

Because our analytics are cookieless and do not identify individual visitors, there is no individual visitor profile to access or delete. To exercise any right, contact us at [email protected]. We will respond within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to safeguard your data and to notify you of significant incidents where required.

Children

Blog CMS is not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "last updated" date above and, where appropriate, notify you. Your continued use of the service after changes take effect means you accept the updated policy.

How to contact us

If you have questions about this policy or your data, email us at [email protected]. We're happy to help.