BoosterMap
Legal

Privacy Policy

BoosterMap processes only the data needed to run the booster stock map, account system, stock alerts, safety tooling, and support workflows. We do not sell personal data and we do not use ad SDKs in v1.

Lawful bases

  • Contract: account creation, sign-in, session security, stock reports, support, and in-app account deletion.
  • Consent: precise location for nearby search, stored stock-alert location, push notifications, and marketing pushes where enabled.
  • Legitimate interest: anti-abuse rate limiting, reputation weighting, moderation, security logging, and correction of public business listings.
  • Legal obligation: billing, tax, and required safety or authority-contact records.

Location consent

  • Nearby search uses precise location with consent and does not create a location history.
  • Stock-alert location is stored as one current device location, overwritten on update, and used only for matching nearby stock alerts.
  • Stored location is removed when consent is withdrawn, the token becomes invalid, the account is deleted, or the value is older than 30 days.

Retention schedule

  • Account data is kept while the account exists, then hard-deleted after the 30 days deletion grace window.
  • Last-known device location is overwritten on update and purged after 30 days without refresh.
  • Alert delivery logs are retained for 90 days.
  • Rejected shelf photos are removed after 30 days.
  • Moderation free text is redacted after 12 months while structured audit rows are retained for safety and DSA accountability.
  • Stock reports are retained as place history and de-attributed when an account is purged.

Account and deletion

Account data includes sign-in identifiers, email, handle, moderation state, device sessions, and stock-report history. In-app account deletion starts a 30 days grace window, revokes active tokens, removes devices, disables alerts, and then hard-deletes or de-attributes retained records according to the retention schedule.

Community reports and photos

Stock reports are retained as place history. Shelf photos are reviewed before public display, can be removed through moderation, and are deleted when required by takedown or account deletion rules. Photos should show shelves, not identifiable people.

Processors

  • Hetzner: hosting for the application, database, queues, and logs in the EU.
  • Cloudflare: DNS, CDN, R2 object storage for photos and backups.
  • Expo: push delivery and build tooling.
  • Google and Apple: sign-in providers.
  • Sentry: diagnostics with personal data scrubbing.