Privacy policy
This notice explains which personal data PageCompose processes and why. PageCompose does not use advertising cookies or cross-site tracking.
Controller
Finn Hillebrandt
Am Brandberg 10
21401 Thomasburg
Germany
info@blogmojo.de
Visiting this website
Technically necessary connection data may be processed, including IP address, time, requested address, browser identifier and status code. The purpose is secure and reliable delivery. The legal basis is Article 6(1)(f) GDPR.
Hosting
The managed Cloudflare runtime delivers the application and processes private project files and operational data in access-controlled storage. Existing Vercel compatibility deployments may continue to use Vercel and Neon until their migration is complete. Processors operate under data-processing agreements. Legal transfer mechanisms apply where data is transferred outside the EEA.
Necessary sessions
Protected studios and team access use technically necessary, script-inaccessible session cookies. They contain no advertising identifier. The legal basis is Article 6(1)(b) GDPR where required to provide the service, otherwise Article 6(1)(f) GDPR.
Accounts and contracts
Registration involves the account name, email address, password hash, selected plan, contract status and assigned projects. The password itself is not stored. Processing is required for pre-contractual steps and performance under Article 6(1)(b) GDPR.
Payments through Paddle
Paddle is the merchant of record and authorized reseller. Paddle processes payment, invoicing, tax, fraud-prevention and subscription data as an independent controller, then shares the data PageCompose needs for product fulfillment and support. See the Paddle Privacy Notice.
Project content and published websites
PageCompose processes content, media, revisions and operational data stored by users to provide the contracted service. For forms on customer websites, that website operator determines the purpose and means of processing.
MCP and external AI services
Users may connect a self-selected agent through MCP. The project data that agent reads or changes depends on the granted capabilities and user instructions. The connected provider's terms and privacy notice apply to its processing.
User-connected email services
Users may connect their own Resend, SendGrid, Brevo, Mailjet, Mailgun or Mailchimp Transactional account. Sender data, recipient addresses and message content are sent to the selected service on the user's instruction. Credentials and optional reply-to addresses are stored encrypted.
Retention
Data is retained only for the relevant purpose, statutory retention obligations or the defence of legal claims. Project content is removed after contract termination under the agreed deletion periods.
Your rights
Data subjects have the statutory rights to access, rectification, erasure, restriction, portability and objection, plus the right to lodge a complaint with a supervisory authority. Contact info@blogmojo.de.
Last updated
12 September 2026