Privacy policy

This policy explains how Crestmas Hub (“we”, “us”) collects and uses personal data on Crestmas Blog (https://blogs.crestmashub.com). We act as the controller of the personal data described below.

1. What we collect

Account details: display name, username, email address and a securely hashed password. Optional: profile picture, bio and website.
Content you create: articles, drafts, editorial notes, comments, reports and contact messages.
Activity: likes, favourites, notification preferences and notifications sent to you.
Newsletter: your email address if you subscribe.
Security and technical data: IP address, login attempts, session identifiers and server logs, used to protect accounts and prevent abuse.

2. Cookies and similar technologies

Session cookie (crestmas_blog): keeps you logged in and protects forms from forgery. Strictly necessary.
Anonymous like cookie (cb_gid, up to 12 months): a random identifier that lets us remember an article like in your browser if you aren’t logged in. It doesn’t identify you personally. Clearing it, or changing devices, resets your guest likes.

We don’t use advertising cookies. We don’t currently run third-party analytics.

3. Third-party resources

To display pages, your browser loads fonts, icons and scripts from Google Fonts, jsDelivr, jQuery’s CDN and, when writing, the Quill editor. Those providers receive your IP address and browser details under their own policies. Share buttons (WhatsApp, Facebook, LinkedIn, email) only leave our site when you choose to use them; we record the click, not whether a share was completed.

4. Why we use your data

To provide accounts, publish articles and run discussions (performance of our agreement with you).
To send service emails such as verification, password resets and editorial decisions (agreement and legitimate interests). You can switch off non-essential notification emails in your profile.
To moderate content, prevent spam and fraud, and keep the service secure (legitimate interests).
To send the newsletter, if you subscribe (consent). You can unsubscribe at any time.
To meet legal obligations.

We don’t sell your personal data.

5. Sharing

Your display name, username, profile picture, bio and public content are visible to other visitors. We share data with service providers that host the site and deliver email, who may only process it on our instructions, and with authorities when the law requires it. Your email address is never shown publicly.

6. Retention

Account data is kept while your account exists.
Login attempt records are deleted after about 30 days, and used verification or reset tokens shortly after they expire.
If you delete your account, we anonymise it and remove favourites and notifications. Published articles and comments remain, shown under “Former member”.
Newsletter addresses are kept until you unsubscribe.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict some processing, to withdraw consent, and to complain to your data protection authority. You can edit or delete most data yourself from your account page. For anything else, email info@crestmashub.com.

8. Security

Passwords are hashed, sessions are protected, and access to administration is permission-controlled. No system is perfectly secure, so please use a strong, unique password.

9. International transfers

Our hosting, email and CDN providers may process data in other countries. Where required, we rely on appropriate safeguards for those transfers.

10. Children

Crestmas Blog is not intended for children under 16, and we don’t knowingly create accounts for them. If you believe a child has registered, contact us and we’ll remove the account.

11. Changes

We’ll post updates on this page and change the date above. For material changes, we’ll also notify registered members by email or on the site.