Privacy Policy & Guarantees

When creating an account on The Blog Zone, you only need to choose a username and password. The platform does not require an email address or real name.

If you optionally choose to provide an email during signup or in your Profile Settings, it is used solely for account password recovery via a one-time 6-digit verification code (OTP). Your email will never be sold, shared, or spammed.

When you mark a blog post as Private, both its title and content are encrypted on the server using Node’s cryptographic algorithms (AES-256) before reaching the PostgreSQL database.

In the database, private thoughts look like random hexadecimal ciphertext. Not even database administrators or hosting operators can read your content. The ciphertext is decrypted only when the original author's authenticated session requests it.

AI writing assistance (improving drafts, simplifying sentences, summarizing articles) is powered by Groq Cloud APIs. Because privacy is the core priority:

• Before any text is sent to the AI service, you receive a transparent warning modal informing you that external processing will occur.
• Writers are actively advised never to run AI actions on confidential or sensitive private posts.
• AI is only invoked on text you explicitly highlight and request assistance for. Drafts are never automatically scanned or scraped in the background.

When you upload images into the rich text editor, they are stored securely in Supabase storage buckets. If you delete an image from your post, delete the post itself, or if an account is removed, the backend automatically purges the corresponding media files from the storage bucket so no orphaned images linger on servers.

The Blog Zone does not embed Google Analytics, Facebook Pixel, advertising networks, or third-party behavioral profiling tools. Your authentication token is securely stored in your browser's localStorage and is only transmitted to the API to authenticate your requests.