This Privacy Policy outlines how your data is collected, stored, and managed when using the George's Guest Blog Uplink console (guest-blog.geohack.top). We respect your privacy and are committed to protecting your personal information.

1. Information We Collect

To verify the authenticity of submissions and provide communication updates, we collect limited personal data during authorization:

  • GitHub Profile Information: When you authorize with GitHub, we retrieve your unique GitHub ID, username, public display name, and avatar image link.
  • Verified Email Address: We fetch the primary verified email linked to your GitHub account.
  • IP Address & Device Data: Standard web requests collect your IP address and user-agent string for spam detection and security diagnostics.

2. How We Use Your Data

We collect and utilize your information solely for the following purposes:

  • Author Attribution: Your display name and personal website link are publicly credited on the blog alongside your published post.
  • Anti-Spam & Security: To authenticate contributors and prevent automated bots from spamming the database.
  • Email Alerts (Resend API): We use the Resend service to email you when:
    • Your guest article has been successfully received/staged.
    • Your article draft has been approved and published to the live blog.

3. Data Storage and Preservation

All authenticated profiles and article drafts are stored securely inside our MongoDB database. Session tokens are signed using a secure JWT algorithm and stored inside your browser as a secure HttpOnly Cookie to prevent cross-site scripting (XSS) leaks.

4. Third-Party Services

We do not sell, rent, or trade your personal data. We only share specific parameters with trusted third-party providers required to run the service:

  • GitHub: Handles the OAuth authentication exchange.
  • Resend: Delivers transactional confirmation emails for submissions and publication notices.
  • Cloudflare: (Optional) Serves Turnstile CAPTCHA validation parameters to prevent brute-force attacks.

5. Your Rights and Data Deletion

If you wish to have your guest contributor profile and drafts permanently deleted from our database collections, please contact George directly. We will process your deletion request within 5 business days, which will permanently remove your user session record and draft articles.