1. Data We Collect
We collect account and profile information (such as email, username, and encrypted password hash), subscription metadata, authentication/session data, billing references from Stripe, support communications, and product telemetry needed to operate and secure the service.
2. How We Use Data
We use data to create and secure accounts, process subscriptions, provide access based on plan tier, improve reliability and performance, detect abuse, communicate product updates, and respond to support requests.
3. Payments and Third Parties
Payment processing is handled by Stripe. We do not store full payment card numbers. We may also use service providers for hosting, authentication, analytics, and customer communications. These providers process data on our behalf under contractual protections.
4. Data Sharing
We do not sell personal information. We share data only as needed to operate the platform, comply with legal obligations, enforce terms, protect rights and safety, or in connection with a merger, acquisition, or asset transfer.
5. Cookies and Similar Technologies
We use cookies and related mechanisms for session management, authentication, security, and basic product analytics. Disabling certain cookies may limit product functionality.
6. Retention
We retain personal data for as long as needed to provide services, maintain account history, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and regulatory requirements.
7. Security
We implement reasonable administrative, technical, and organizational safeguards to protect data. However, no internet or cloud transmission method is 100% secure, and we cannot guarantee absolute security against all incidents, including sophisticated cyberattacks.
8. Your Choices and Rights
Depending on your location, you may have rights to access, correct, delete, or export certain personal data, or to object to specific processing. To exercise rights, contact us using the address below.
9. Notice to California Residents (CCPA/CPRA)
California residents may have rights to know what personal information we collect, use, disclose, and retain; request deletion or correction; and limit certain uses of sensitive personal information where applicable. Booger does not sell personal information or share personal information for cross-context behavioral advertising as those terms are defined by California law.
10. Notice to EEA, UK, and Switzerland Users (GDPR)
For users in the EEA, UK, or Switzerland, processing may be based on contract necessity, legitimate interests, consent, and legal obligations, as applicable. Subject to local law, you may have rights of access, correction, deletion, portability, restriction, and objection, and the right to lodge a complaint with your local supervisory authority.
11. Children
Booger is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
12. Data Breach and Security Limitation
In the event of a suspected or confirmed security incident, we will take commercially reasonable response measures and provide notifications required by applicable law. Except where required by law, we are not liable for unauthorized access caused by events outside our reasonable control, including advanced persistent attacks, zero-day exploits, third-party infrastructure failures, or force majeure events.
13. Policy Updates and Contact
We may update this Privacy Policy from time to time. Material updates will be posted with a revised effective date. Questions can be sent to david@boogerinfo.com.