Effective Date: January 31, 2026
Last Updated: January 31, 2026
1. Introduction
This Privacy Policy describes how the Blabler for Android application (“App”) processes user data. The App is an unofficial mobile client for the Blabler.pl social networking service.
App Publisher:
Robert Maron
Email: robmar@architectureofvibes.com
2. Nature of the Application
Blabler for Android is a client application for an existing social networking service available at https://blabler.pl. The App enables convenient use of this service on mobile devices.
Important: Using the App requires compliance with the Blabler.pl Terms of Service and Privacy Policy, available at:
👉 https://blabler.pl/strona/prywatnosc.html
The App is not affiliated with the operator of Blabler.pl and is an independent project.
3. Data Stored on Your Device
The App stores the following data exclusively locally on your device:
3.1. Authentication Data (Encrypted)
| Data | Storage Method |
|---|---|
| User password | Encrypted (AES-256-GCM) in EncryptedSharedPreferences |
| Session token (cookie) | Encrypted (AES-256-GCM) in EncryptedSharedPreferences |
| OAuth tokens (Fediverse) | Encrypted (AES-256-GCM) in EncryptedSharedPreferences |
Encryption uses Android Keystore, meaning cryptographic keys are stored in a secure, hardware-backed module on your device and cannot be exported.
3.2. Application Data (Unencrypted)
| Data | Purpose |
|---|---|
| Post draft | Preserving unfinished posts between sessions |
| User profile cache | Faster loading and offline functionality |
| App settings | Display and notification preferences |
This data is stored in standard Android storage and does not contain sensitive information.
4. Data Transmitted to Servers
The App communicates exclusively with the Blabler.pl server (and optionally with Fediverse servers during OAuth login).
The App does NOT transmit data to:
- ❌ Any analytics servers
- ❌ Firebase, Crashlytics, or similar services
- ❌ Any advertising servers
- ❌ Any servers owned by the App publisher
All data (posts, messages, profiles) is fetched from and sent directly to Blabler.pl in accordance with its privacy policy.
5. App Permissions
The App requires the following permissions:
| Permission | Purpose | Details |
|---|---|---|
| Internet | Communication with Blabler.pl | Required for app functionality |
| Network State | Detecting internet availability | Optimizing offline behavior |
| Notifications | Informing about new messages | Optional, user decides |
| Boot Completed | Resuming notification checks | Only if notifications enabled |
The App does NOT require access to:
- ❌ Location
- ❌ Camera
- ❌ Microphone
- ❌ Contacts
- ❌ External storage (beyond standard cache)
6. Notifications
The App offers a notification feature for new messages (“Secretary”). Two modes are available:
6.1. Local Checking (Default)
- ✅ Operates locally on your device
- ✅ Periodically checks the Blabler.pl server in the background
- ❌ Does NOT transmit any data to external servers
6.2. Push Notifications (Optional)
If you enable push notifications, your session cookies (PHPSESSID, esid) are sent to a notification server operated by the app publisher.
Cookie Security:
- ✅ Cookies are encrypted using RSA-2048 (OAEP SHA-256) before leaving your device
- ✅ On the server, they are stored only in encrypted form
- ✅ Decryption occurs only in RAM, at the moment of use (checking Secretary)
- ✅ Decrypted data is never written to disk or logged
- ❌ Cookies are NOT stored in plaintext or logged
You can disable push notifications at any time in the app settings, which will delete your data from the notification server.
You have full control over this feature and can disable it in the app settings.
7. Data Security
We implement the following security measures:
- AES-256 Encryption – all sensitive data (passwords, tokens) is encrypted using AES-256-GCM
- Android Keystore – cryptographic keys are stored in a secure, hardware-backed module
- No Background Transmission – the app does not send data to external servers
- HTTPS – all communication with Blabler.pl uses encrypted connections
8. User Rights
You have full control over your data:
- Data Deletion – uninstalling the App automatically removes all local data
- Logout – logging out removes stored authentication data
- Disable Notifications – you can disable background checking at any time
Regarding data on the Blabler.pl server – please contact the operator of that service.
9. Age Requirements
The App is intended for users who are 13 years of age or older. We do not knowingly collect data from children under this age.
10. Changes to This Privacy Policy
We will notify you of significant changes to this Privacy Policy through app updates. We recommend periodically reviewing this page.
11. Contact
For questions regarding privacy or this application:
Robert Maron
📧 blabler-android@architectureofvibes.com
12. Regulatory Compliance
This Privacy Policy complies with:
- General Data Protection Regulation (GDPR, EU 2016/679)
- Google Play Store requirements
- Apple App Store requirements
Blabler for Android – unofficial client for Blabler.pl