Choose how you want to continue.
By continuing, you agree to our Privacy Policy.
This policy explains what information diff.blog collects, why we collect it, and the choices you have. We try to collect as little as possible and to be plain about what we do collect.
diff.blog ("we", "us") is an aggregator that surfaces posts from independent developer blogs. The service is operated by Vishnu Subrahmanian, an individual based in London, United Kingdom. For any privacy question or request, email [email protected].
You sign in with GitHub or Google. When you do, we receive from that provider your name, email address, username, and profile picture, along with the basic public profile information the provider shares. We use this to create and identify your account. We never receive your GitHub or Google password.
If you add a blog, we store its URL and fetch its public RSS/Atom feed on a schedule. We store and display the posts, titles, tags, and excerpts published in that feed, and we send the post content to OpenAI to score it for originality, depth, and usefulness. This is content you have already made public on your own site, and we do not access anything behind a login.
Not every blog on diff.blog was submitted by its author. We also build our directory by discovering public developer blogs from sources such as public blog lists and public developer profiles (for example, a GitHub profile that links to or hosts a blog), and we index their public RSS/Atom feeds in the same way described above. Where we can identify the author's public GitHub account, we may also display their public GitHub profile picture next to their blog for attribution, and we may store a copy of it. If we have indexed your blog and you would prefer we did not, email [email protected] and we will remove it, including any stored profile picture, and stop fetching it. We only ever use information you have already made public.
To understand how the site is used and to rank posts, we record events on our own servers. This includes page views, posts you view, links, jobs, and ads you click, ad impressions, follows, and time spent on a page. Alongside these events we store your IP address, browser user-agent, the referring page, and a persistent visitor identifier we use to distinguish one visitor from another. The visitor identifier does not tell us your name on its own, but combined with the other data it is personal (pseudonymous) data, and we treat it as such. This data lives on our own infrastructure and is not sold or shared with advertising networks.
If you pay to post a job, payment is handled by Stripe. Your card details are entered on Stripe's checkout and are processed by Stripe. We never see or store your full card number. We retain a record that a payment was made and the associated job posting.
We use two kinds of cookies:
We do not use third-party advertising or cross-site tracking cookies. You can block cookies in your browser, though you may not be able to log in if you block the necessary ones.
We rely on contract to provide the service to logged-in users, and on our legitimate interests in running, securing, and improving the site (including analytics, abuse prevention, and sending digests and notifications to registered users). You can opt out of our emails at any time using the unsubscribe link in any of them.
We do not sell your personal information. We share it only with the service providers we rely on to run diff.blog:
We may also disclose information if required by law. Some of these providers (for example AWS SES) process data outside the UK and EU. Where that happens, the transfer is covered by the safeguards those providers offer, such as standard contractual clauses.
We keep your account and blog data for as long as your account exists. You can ask us to delete your account at any time by emailing [email protected], and we will erase your profile and associated personal data. If your blog was also indexed in our directory, tell us and we will remove its content and stop fetching it as well.
We keep usage data (events, IP addresses, and user-agents) only as long as it is useful for analytics and abuse prevention, and delete or anonymize it when it is no longer needed. Payment records are retained as long as required for accounting and tax purposes.
If you are in the UK or EU, you have the right to access, correct, delete, or export your personal data, to restrict or object to certain processing, and to withdraw consent. To exercise any of these, email [email protected] and we will respond within one month. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).
diff.blog is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us information, contact us and we will delete it.
We may update this policy from time to time. When we do, we will change the "last updated" date above. Significant changes will be communicated where appropriate.
Questions about your privacy? Email [email protected].