Privacy

App Permissions

BuffIT requests only the permissions needed to function:

• Account Read: Read access to your Buffer account and connected channels
• Posts Write: Create and publish posts to your social media accounts

What is shared with Buffer

• Your post content and selected channels are sent to Buffer when you press "Post now".
• Media files are uploaded to our CDN and the URL is included in your post.

Backend services

BuffIT uses a Cloudflare Worker backend for:

• OAuth handling: Securely exchanges your authorization code for an access token (client secret never exposed to browser).
• Token refresh: Automatically checks if your access token is expiring and refreshes it server-side before making API calls. Refreshed tokens are returned to your browser via response headers and stored automatically.
• Media storage: Accepts file uploads and stores them in Cloudflare R2 object storage. Files are publicly accessible via the CDN.
• Media cleanup: Automatically deletes uploaded media files after 15 minutes if they haven't been posted. This reduces storage costs for unused uploads.
• Post creation: Handles GraphQL mutations to create posts on Buffer, executed server-side with your authenticated token.
• Channel caching: Caches your Buffer channels and account info for 1 hour to reduce API calls to Buffer. Cache is keyed by a hash of your access token and is only accessed with valid authorization.

Data retention

• Your access and refresh tokens are stored in your browser's session storage only. Refresh tokens are sent to our Worker to enable automatic token renewal before expiration (within 5 minutes).
• When tokens are refreshed server-side, the new tokens are returned to your browser via secure response headers and stored in your browser session.
• Cached channel and account data expires automatically after 1 hour.
• Uploaded media files are stored on our CDN and automatically deleted after 15 minutes if not posted. Posted media files (included in posts to Buffer) remain on the CDN indefinitely until manually deleted.
• We do not log or store your posts, channels, or account information.