Privacy Policy

What we collect

We collect information you provide directly — such as your name, email address, and account preferences — and limited technical data generated when you use the service, including pages viewed, feature interactions, device and browser type, and approximate location derived from your IP address.

How we use your data

We use your information to operate the product, personalise your experience, process payments, send service-related communications, and maintain security. We may use aggregated, de-identified data to understand usage patterns and improve features.

Third-party service providers

We share data with the following third-party providers who help us operate the service. Each is bound by their own privacy policy and is only permitted to use your data on our behalf. We do not sell personal data.

• Clerk — handles account creation, authentication, and session management. Stores your name, email address, and login credentials. Clerk Privacy Policy
• Stripe — processes subscription payments. Stores payment method details, billing address, and transaction history. Stripe Privacy Policy
• Resend — sends transactional and marketing emails on our behalf. Stores your email address, name, and email subscription status. Resend Privacy Policy
• PostHog — provides product analytics. Collects page views, feature interactions, device and browser information, and approximate location based on IP address. PostHog Privacy Policy
• Sanity — our content management system. Stores user-generated content, saved library items, and feedback submissions. Sanity Privacy Policy
• Vercel — hosts the Blossom application. Processes request logs and IP addresses as part of normal hosting infrastructure. Vercel Privacy Policy

Cookies and tracking

We use cookies and similar technologies for analytics and to improve the product. PostHog sets analytics cookies to track page views and user interactions. These cookies do not contain personally identifiable information on their own.

You can opt out of analytics tracking at any time by contacting us at floris@moreblossom.com. Opting out of analytics does not affect the core functionality of Blossom.

Email communications

We send two types of emails: transactional emails (account confirmations, billing receipts, library update notifications) and marketing emails(product updates, weekly digests). You can opt out of marketing emails at any time from your account notification settings or by clicking "unsubscribe" in any marketing email. Transactional emails cannot be opted out of as they are required for the service to function.

Email open tracking

Our emails contain a small transparent image. When your email client loads it, we learn that the message was opened. We use this only in aggregate, to see roughly what proportion of a mailing is being read. If you would rather not be counted, blocking remote images in your email client prevents it, and most clients can do this. Note that some clients load these images automatically whether or not you read the message, so the figures are approximate by nature.

We do not track link clicks in email. Links in our emails point directly at their destination and are not rewritten to route through a tracking redirect.

We keep records of emails that bounced or were reported as spam, so we can stop sending to addresses that are not working and honour complaints. These records identify the recipient by a one-way cryptographic hash rather than by email address, are kept for 90 days and are then deleted. If your address bounces repeatedly, or a message from us is reported as spam, we switch off your marketing emails automatically. Our email provider, Resend, keeps its own delivery records under its privacy policy, linked above.

Security and retention

We apply technical and organisational measures to protect your data. We retain your information for as long as your account is active or as needed to provide the service. Upon account deletion, personal data is removed within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention.

Your rights

You have the right to access, correct, or delete your personal data. You may also request a copy of your data in a portable format, or object to certain types of processing. To exercise any of these rights, contact us at floris@moreblossom.com. We will respond within 30 days.

If you are located in the European Economic Area, you also have the right to lodge a complaint with your national data protection authority.

Contact

Questions or requests about this policy? Reach us at floris@moreblossom.com.