Privacy Policy

1. Data Controller

GoBird OÜ

Harju maakond, Tallinn, Lasnamäe linnaosa

Sepapaja tn 6, 15551, Estonia

Registry Code: 17311365

Email: info@gobird.io

2. What Data Do We Collect?

When using the HelloBlog service, we may collect the following data:

Registration data: username, email address, password (encrypted)
Profile data: display name, profile picture, bio
Usage data: pages viewed, clicks, browsing history
Technical data: IP address, browser type, operating system, device type
Cookies and local storage: session and preference data stored in your browser

3. Why Do We Collect Data?

Purposes of data processing:

Operating and improving the service
User account management and authentication
Displaying personalized content
Creating and analyzing statistics
Preventing and handling security incidents
Fulfilling legal obligations

4. Legal Basis for Data Processing

Contract performance: data processing necessary to provide the service
Consent: analytics cookies, newsletter subscription, marketing communications
Legitimate interest: service improvement, security, fraud prevention
Legal obligation: accounting and tax obligations

5. Data Retention Period

User accounts: until account deletion or user request
Log files: maximum 90 days
Analytics data: 26 months (Google Analytics)
Newsletter subscriptions: until unsubscription

6. Cookies and Local Storage

This site uses cookies and browser local storage:

Essential cookies: session management, login (always active)
Functional storage: theme preference, cookie consent status
Analytics cookies: visitor statistics via Google Analytics (consent required)

For detailed information, see our Cookie Policy.

7. Third-Party Services

We use the following third-party services that may process your data:

Google Analytics

Provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Purpose: website analytics and visitor statistics
Data: pages visited, time spent, device info, approximate location
Legal basis: Consent (cookie banner)
Google Privacy Policy | Opt-out

Gravatar

Provider: Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA
Purpose: displaying user avatars
Data: MD5 hash of email address, IP address
Legal basis: Legitimate interest (user identification)
Automattic Privacy Policy

8. International Data Transfers

Some of our third-party service providers are located in the United States. When your data is transferred to the US, it is protected by:

EU-US Data Privacy Framework: Google LLC is certified under the EU-US Data Privacy Framework
Standard Contractual Clauses: approved by the European Commission for data transfers

We only use service providers that offer appropriate safeguards for your personal data in accordance with GDPR Article 46.

9. Your Rights

Under GDPR, you have the following rights:

Right of access: you can request a copy of your stored data
Right to rectification: you can request correction of inaccurate data
Right to erasure: you can request deletion of your data ("right to be forgotten")
Right to restriction: you can request restriction of data processing
Data portability: you can request your data in machine-readable format
Right to object: you can object to data processing based on legitimate interest

To exercise your rights, contact us at info@gobird.io.

10. Withdrawal of Consent

Where we process your data based on consent, you have the right to withdraw that consent at any time. You can:

Manage cookie preferences by clearing your browser cookies and local storage
Unsubscribe from newsletters using the link in any email
Contact us to withdraw any other consent

Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

11. Complaints

If you believe we have violated your privacy rights, you can file a complaint:

Directly with us: info@gobird.io
Estonian Data Protection Inspectorate: aki.ee

You also have the right to lodge a complaint with your local data protection authority.