Legal

Privacy Policy

Last updated: October 6, 2026

1. Information We Collect

Account Information: When you create an account, we collect your name, email address, and encrypted password.

Usage Data: We track content generation counts, feature usage, and session activity to enforce plan limits and improve the Service.

Technical Data: We may collect IP addresses, browser type, and operating system information for security and analytics purposes.

2. Information We Do NOT Collect

  • AI keys: You do not provide a model API key. BloGoose supplies AI access.
  • Generated Content: Content generated through the Service stays on your self-hosted instance.
  • Payment cards: Card payments are processed by Dodo Payments. BloGoose does not store card numbers.

3. How We Use Information

We use collected information to:

  • Provide, maintain, and improve the Service
  • Authenticate users and enforce plan limits
  • Detect and prevent fraud or abuse
  • Communicate important updates about the Service
  • Generate anonymized usage analytics

4. Data Storage and Security

BloGoose is a self-hosted application. All data (user accounts, content, API keys, configurations) is stored on the server where you deploy BloGoose. We implement industry-standard security measures including:

  • Password hashing with bcrypt
  • CSRF token protection on all API endpoints
  • Session-based authentication with HTTP-only cookies
  • Rate limiting on authentication endpoints
  • Audit logging of administrative actions

5. Data Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties. Data may be shared only:

  • With your explicit consent
  • To comply with legal requirements
  • To protect our rights, privacy, safety, or property

6. Cookies

BloGoose uses essential session cookies for authentication. These cookies are HTTP-only and are not used for tracking or advertising purposes. No third-party tracking cookies are used.

7. Data Retention

Account data is retained as long as your account is active. You may request deletion of your account and associated data at any time. System logs and audit trails are retained for security purposes and are automatically cleaned up based on configured retention policies.

8. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data
  • Object to data processing

9. Children's Privacy

BloGoose is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.

11. Contact

For privacy-related inquiries, contact us at [email protected].