1. Who we are
The data controller is Alan Mandić, a private individual based in Croatia (European Union). This is a side project, not a registered company. For all privacy questions, contact dalmatia2000@gmail.com.
2. What data is processed, where, and why
Data you provide directly to us — none
The seller does not run servers that collect your data. We have no database, no analytics, no tracking pixels, no email list, no user accounts.
Data processed by the AI2BLOGS app (in your browser only)
The downloaded HTML application processes the following locally in your browser:
- Photos you upload — never leave your browser. Watermarking happens via the canvas API on your device. The seller has no access to your photos.
- Anthropic API key — stored in your browser's localStorage. Sent directly from your browser to
api.anthropic.com. The seller never sees it. - WordPress credentials (Application Passwords) — stored in your browser's localStorage. Sent directly from your browser to your WordPress site. The seller never sees them.
- Notes, keyphrases, and article inputs — sent to the Anthropic API for article generation. Subject to Anthropic's privacy policy.
- Generated articles — exist in your browser. Sent to your WordPress or Ghost site only when you click Publish.
Data passing through the Ghost proxy (stateless, no logs)
For Ghost publishing, requests pass through a Cloudflare Worker hosted at ghost-proxy.ai2blogs.com. This worker:
- Forwards each request from your browser to your Ghost site, signing the JWT token required by Ghost's Admin API
- Does not log anything — no requests, no IPs, no API keys, no content
- Does not have a database — nothing is stored, ever
- Cloudflare itself may log basic request metadata (IP address, timestamp) for abuse prevention; see Cloudflare's privacy policy
Data processed during purchase
When you buy AI2BLOGS, payment is processed by Lemon Squeezy, who acts as merchant of record. They collect:
- Your name, email, billing address, payment information
- VAT details where applicable
- This data is governed by Lemon Squeezy's privacy policy: lemonsqueezy.com/privacy
The seller receives only your email address (for delivery of the download link and licence) and basic order metadata from Lemon Squeezy. This is stored in Lemon Squeezy's seller dashboard, not on a separate seller-controlled database.
3. Third parties involved
| Service | Role | Data they receive |
|---|---|---|
| Lemon Squeezy | Merchant of record (payments) | Name, email, billing info, payment data |
| Cloudflare | Website hosting + Ghost proxy | Standard web request logs (IP, timestamp) |
| Anthropic | AI generation (your direct API call) | Your prompts, notes, research links |
| Google Fonts | Web fonts on this website | IP address (Google's standard processing) |
4. Cookies
The AI2BLOGS website (ai2blogs.com) uses no cookies. No analytics, no tracking, no advertising. The downloaded application uses localStorage only, which is local to your browser and not technically a cookie.
5. Your rights under GDPR
Under the General Data Protection Regulation, you have the right to:
- Access the data we hold about you (which is essentially: your email address from your Lemon Squeezy purchase)
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict processing
- Object to processing
- Data portability — receive your data in a machine-readable format
- Lodge a complaint with a supervisory authority. In Croatia: AZOP (azop.hr)
To exercise these rights, email dalmatia2000@gmail.com.
Note: payment data held by Lemon Squeezy is governed by their own data protection processes. Use their privacy contact for requests about that data.
6. Data retention
- Email + order records: retained as long as required by tax/accounting law (typically 5–7 years in EU jurisdictions). Held by Lemon Squeezy.
- Anything else: not retained — there is nothing to retain.
7. International data transfers
Cloudflare and Anthropic are US-based companies. When you use the app, data may be transferred to the US. These transfers are covered by Standard Contractual Clauses (SCCs) and/or the EU-US Data Privacy Framework, where applicable.
8. Children
AI2BLOGS is not directed at children under 16. Do not purchase or use the app if you are under 16.
9. Changes
This policy may be updated. The "Effective date" at the top will reflect the latest version. Material changes will be announced on the website.
10. Contact
For all privacy-related questions, requests, or complaints:
dalmatia2000@gmail.com