Privacy Policy

Last updated: January 2025

Simple Version

We care about your privacy.

• Self-hosted: You control everything. We never see your data.
• Hosted SaaS: We only collect what's necessary to run the service. We never sell your data.

What We Collect

If You Self-Host (Free Version)

Nothing. You run Blik on your own infrastructure. We don't collect, store, or have access to any of your data.

If You Use Our Hosted Service

We collect the minimum required to operate:

• Account info: Email, organization name, billing details
• Application data: Reviews, feedback, reports you create in the system
• Technical data: Server logs, error reports (stored 30 days)

What We Don't Do

• We don't sell your data. Ever.
• We don't share data with third parties (except payment processor Stripe for billing)
• We don't track you across websites
• We don't read your questionnaires, questions, or feedback unless you ask us to (for example, for a support request), and we never share or reuse them for other customers
• We don't use invasive analytics

Where Data Lives

Hosted service: EU servers (Hetzner, Germany). GDPR compliant.

Self-hosted: Wherever you choose to host it.

Your Rights

You can:

• Export all your data (JSON format)
• Delete your account and all associated data
• Request a copy of what we have (email us)

Cookies

We use essential cookies only:

• Authentication: Keep you logged in
• Theme preference: Remember light/dark mode

No tracking cookies. No advertising cookies.

Data Security

We take security seriously:

• SSL/TLS encryption for all connections
• Encrypted database backups
• Regular security updates

Data Retention

• Active accounts: Data kept while account is active
• Deleted accounts: Data permanently deleted within 30 days
• Backups: Retained 90 days for disaster recovery

Changes to Privacy Policy

We'll email you if we make significant changes. Continued use means you accept the changes.

Contact

Questions about privacy? Email: [email protected]

Or open an issue on GitHub