blogbuddy

Privacy policy

Last updated 24 September 2026

Average Joe Technology OÜ is the controller for personal data in the blogbuddy control plane and on this website. We are based in Estonia and process data under the EU GDPR.

What we process

  • Account email, a password hash, role, and status.
  • A session cookie after you sign in. See the cookie inventory.
  • Blog records you create: slug, engine, size, and the CMS administrator password, stored encrypted and shown only to the account that owns that blog. A free account may own two blogs. A paid account has a blog limit we set.
  • Sign-in attempts, used to limit guessing.
  • Contact messages you send from this site or while signed in: name, email, optional organisation, and the message. The super admin reads them in the app, and a copy is posted to the operator's private chat channel.

This marketing host does not run analytics and does not set a first-party cookie. We do not send product email.

Why

  • Contract: to provide the invited account and the blogs you ask for.
  • Legitimate interests: to keep the service secure and to answer mail you send us.
  • Legal obligation: where tax or company law requires us to keep a record.

Who else sees it

We do not sell personal data. Subprocessors that may handle it:

  • Hetzner — hosting the cluster that runs the control plane.
  • Cloudflare — edge protection when a host is proxied. We do not use it for advertising.
  • GitHub — the private repository that stores blog configuration the control plane writes.

Retention

Account and blog records stay while the account or blog exists, then for as long as we need them to meet a legal duty. Sign-in attempt counters are short-lived. You can ask us to delete an account by writing to [email protected].

Your rights

You can ask for access, correction, erasure, restriction, portability, or to object, and you can complain to the Estonian Data Protection Inspectorate (AKI).

Transfers and children

We process data in the EU. If a subprocess transfers data outside the EU, we use an adequacy decision or standard contractual clauses. The service is not directed at children under 16.

Company

Average Joe Technology OÜ, registry code 17309776, VAT EE102895812. Narva mnt 5, 10117 Tallinn, Harju County, Estonia. [email protected].