Privacy Policy

• Account details: your email address, username, and a one-way hash of your password. We cannot read your password.
• Orders: the links or usernames you submit, the service and quantity, and the order's progress.
• Payments: the amount, date, method and the payment processor's reference. Card and wallet details are entered on the payment processor's own page and never reach our servers.
• Support messages: anything you write in a ticket.
• Technical data: your IP address, used briefly to limit repeated login attempts and prevent abuse. Where we keep anything derived from it, we keep a one-way keyed hash, never the address itself.
• Device signals: when you sign up, log in or claim 20 free likes or followers, we record a random device identifier from a cookie, a random identifier kept in your browser's local storage, a one-way hash of your browser's characteristics (a “fingerprint” built from things such as screen size, time zone, language and graphics hardware), and one-way hashes of your IP address and browser version. See “Fraud prevention and the free offer” below.

• To run your account, take payment and deliver your orders.
• To answer support requests.
• To prevent fraud and abuse of the service.
• To send emails you ask for, such as password resets. We do not send marketing email unless you opt in.

New accounts can claim one free order, once per person. To stop the same person claiming it again under another email address, and to protect accounts from misuse, we compare the device signals listed above between accounts. They are used for nothing else: not for advertising, not for tracking you on other sites, and they are never sold or shared.

• The cookie and local-storage identifiers are random values that reveal nothing about you.
• Your browser fingerprint, IP address and browser version are stored only as keyed one-way hashes, so the original values cannot be read back from our records.
• If a claim is refused you see a general message, and you can write to support if you think it is a mistake.

We rely on our legitimate interest in preventing fraud to process these signals. They are kept for as long as your account exists.

• Fulfilment partners: the link and quantity of each order, which they need to deliver it. They do not receive your email address, your name or any payment details.
• Payment processors: Flutterwave and NOWPayments process deposits and receive your email address and the amount.
• Authorities: when we are legally required to.

We do not sell your personal data.

We use a small number of first-party cookies and browser storage entries, all needed for the site to work or to prevent abuse:

• session: keeps you signed in. Removed when you log out; expires after 30 days.
• did: a random device identifier, used only for fraud prevention as described above. Lasts two years and cannot be read by page scripts.
• acct: remembers that this browser has an account, so we can offer “Log in” instead of “Sign up”. Lasts two years.
• Local storage: a random visitor identifier (used for fraud prevention), your light or dark theme choice, and whether you dismissed the free-offer notice.

We do not use advertising or cross-site tracking cookies.

Account, order and payment records are kept while your account is open, and afterwards for as long as tax and accounting law requires. Sign-in sessions expire after 30 days.

You can ask for a copy of your data, ask us to correct it, or ask us to delete your account. Some records may have to be kept where the law requires. Write to support@boostlane.app.

If we change how we handle personal data we will update this page and change the date at the top.