Privacy Policy

Nimblog is operated by its owner ("Nimblog", "we", "us"). For the account data described here we are the controller. For personal data contained in content you import (for example commenters' names), you are the controller and we process it on your behalf to host your site. Contact: legal@nimblog.com.

• Account data: name, email address, profile picture and identifier from your sign-in provider (for example Google), or your email and a password hash if you sign up with email.
• Usage and security data: sign-in times, imports you start, ownership verifications, and a record of each Usage Policy acceptance (version, time, a keyed hash of your IP address and your browser's user-agent).
• Your sites' content: everything you import or upload. Commenter email addresses from imports are stored only as one-way hashes. Images are stored as optimized web versions without their embedded metadata (such as camera details and GPS location); the original files are not retained.
• Abuse reports and moderation: if you report abuse, the address and details you send, your email if you give it, and a keyed hash of your IP address; records of moderation decisions about accounts and sites.
• Server logs: standard request logs (IP address, URL, user-agent, time) kept for security and troubleshooting.

The admin uses one strictly necessary session cookie to keep you signed in and protect forms against cross-site request forgery. We do not use advertising or tracking cookies on the admin. Sites you publish set no analytics cookies unless you add your own Google Analytics ID.

To provide and secure the Service, authenticate you, run imports, prevent and investigate abuse, enforce the Usage Policy, respond to legal requests and notices, and communicate with you about your account and changes to our terms. Legal bases (where applicable): performance of our contract with you, our legitimate interests in securing the Service and keeping it free of abuse, and compliance with legal obligations.

We do not sell personal data. We share it only with service providers that host or operate the Service for us under confidentiality obligations, with your sign-in provider as needed to sign you in, with law-enforcement or other competent authorities when required by law or when we report illegal content, to protect rights and safety, or with a successor if the Service is transferred.

Account data is kept while your account is open and deleted or anonymized within a reasonable period after you close it, except where we must keep it longer by law. Policy-acceptance, abuse-report and moderation records are kept for as long as needed as evidence and to prevent repeated abuse.

Depending on where you live, you may have rights to access, correct, delete, export or restrict processing of your personal data and to object to processing or complain to a data-protection authority. You can export your site content at any time from the Export tab. To exercise other rights, contact legal@nimblog.com.

We use encryption in transit (HTTPS), hashed passwords and access controls, and maintain them on a best-effort basis; no method of transmission or storage is completely secure.

We will post changes on this page with a new version and effective date and, for material changes, notify you.