Privacy Policy

Last updated: February 10, 2026

1. Information We Collect

When you use Juaji Blog, we may collect the following information:

  • Account Information: When you sign in via our identity provider (Keycloak), we receive your name, email address, and username. We do not store passwords.
  • Content You Create: Blog posts, comments, and any other content you submit through the platform.
  • Usage Data: Page views, reading time, and general interaction patterns to improve the service.
  • Technical Data: IP address, browser type, and device information collected automatically through standard HTTP headers.

2. How We Use Your Information

We use collected information to:

  • Provide, maintain, and improve the blog platform
  • Display your name and username alongside your published content
  • Moderate content and enforce community guidelines
  • Generate aggregated analytics (view counts, trending topics)
  • Communicate important service updates

3. Authentication & Security

Juaji Blog delegates authentication to Keycloak, an industry-standard identity provider. We never handle or store your password directly. Authentication tokens are stored in HTTP-only, secure cookies and are automatically refreshed. All traffic is encrypted via TLS.

4. Data Storage

Your data is stored in MongoDB, hosted within our private Docker Swarm infrastructure. Data is not shared with third-party services, analytics platforms, or advertising networks.

5. Cookies

We use the following cookies:

  • Authentication cookies (HTTP-only, secure): Store your login session tokens
  • Theme preference (localStorage): Remember your dark/light mode choice

We do not use tracking cookies or third-party analytics cookies.

6. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request deletion of your account and associated data
  • Edit or delete your published content at any time
  • Withdraw consent for data processing

To exercise these rights, contact us at privacy@juaji.com.

7. Data Retention

Published content remains on the platform until you choose to delete it. Account data is retained for as long as your account is active. If you request account deletion, all personal data will be removed within 30 days.

8. Third-Party Services

We use the following external services:

  • Google Fonts (Inter typeface) for typography
  • Unpkg CDN for HTMX and Feather Icons libraries
  • Let's Encrypt for TLS certificates

These services may collect minimal technical data (IP address) as part of serving content.

9. Changes to This Policy

We may update this privacy policy from time to time. Significant changes will be communicated through the blog platform. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

For questions about this privacy policy, contact us at privacy@juaji.com.