Privacy
Bloggram stores only what it needs to run your blog. This page lists all of it.
What Bloggram stores
About you
- Your Telegram user ID, your first name and your @username if you have one. They come from Telegram when you sign in or add the bot.
- A session record when you are signed in. It holds a hash of your session token and lasts 30 days.
- For a short time, the one-time sign-in codes and links, stored as hashes, and a record of when your account signed in, which is used to limit sign-ins per hour.
- The time each blog was created and the account that created it, which is used for the limit on new blogs.
Bloggram does not ask for your email address or phone number.
About your channel and blog
- The channel's Telegram ID, @username, title and description, the account that connected it, and whether the bot is still an administrator and may edit messages.
- The blog's address, settings, and the last subscriber count that Telegram reported.
- Every post: its text and formatting, title, date, edit date, hashtags, Telegram message numbers, the buttons attached to it, and for imported posts the view count shown on Telegram's public page.
- Photos, copied to Bloggram's storage in the sizes described in Photos and albums.
- Old addresses of the blog, so that they can redirect.
As part of how the bot works, posts pass through a short-lived work queue before they are stored.
About reports
An abuse report holds the blog, the reason, the details you typed and the time. It does not hold your name or any account, and the form needs no sign-in.
What Bloggram does not collect
- No analytics, trackers or advertising.
- No third-party scripts, fonts or images on this site or on blogs.
- No cookies on this site or on blogs. The dashboard sets two cookies only: one for your session and one while a sign-in is in progress, which lasts 5 minutes. They are not used for tracking.
- No record of who reads a blog. Visitor addresses are held in memory to limit abusive request rates and are not written to the database.
As with any web service, the servers and networks that carry the traffic may keep ordinary connection logs. Bloggram also writes technical logs of events such as sign-ins and channel connections, identified by ID numbers.
Who can see it
Blogs are meant to be public. Anyone can see their posts and photos, including the pages of private channels you connect. Search engines see a blog only after it earns trust, as described in Search engines. The maintainer and the admins can see the data above to run the service and handle abuse reports. Bloggram reads your public channel's pages on t.me and talks to Telegram through its Bot API.
How to delete your data
One blog
Open the blog in the dashboard and press Delete blog in its Danger zone, then type the blog's address to confirm. This removes the blog with its posts, hashtags, photos, settings, old addresses and the abuse reports about it. The bot then leaves the channel by itself. Your channel in Telegram is not touched.
Your account
Press Delete account at the bottom of the dashboard's front screen and type delete to confirm. You can also send /deleteaccount to @bloggygram_bot. It replies with a one-time button that signs you in and opens that form.
Deleting your account deletes every blog you own, as described above, and the bot leaves each of those channels. It also deletes your Telegram user ID, first name and @username, your sessions and your sign-in codes and links, and signs you out. It cannot be undone.
What is kept
- A record of each channel you connected: its Telegram ID, @username, title and description, whether an admin suspended or blocked it, and that the bot was removed. It no longer names your account. It is kept so that deleting a blog or an account does not undo a moderation decision.
- The time of each blog creation, without the account. These anonymous counts keep the daily cap on new blogs working.
- The record of when your Telegram account asked for sign-in links or confirmed a sign-in, which limits sign-ins per hour. It is deleted within an hour.
Sessions and sign-in records expire on their own. Posts you delete in Telegram are removed from the blog by the checks described in Edits and deletions.