Privacy policy

This policy explains what Boostr collects, why, and your rights under the Nigeria Data Protection Act (NDPA) and the GDPR.

People who open a shared link

• A random visitor ID in a first-party cookie (one year), used only to stop duplicate and fake clicks.
• Your country and network (from your IP address). We never store your IP address; we keep a salted hash that changes every day.
• A hash of your browser's user agent, and whether you interacted with the page.
• Your precise location only if an ad asks for it and you allow it in your browser. It's used for a one-time check and stored as a distance, not coordinates.

Account holders

• Name, email, password (hashed), and the roles you choose.
• Ledger records of payments and earnings, kept as long as the law requires.

Retention

Individual click records are deleted after 180 days; only daily totals are kept after that.

Your rights

You can ask to access, correct or delete your data, or object to processing, by emailing privacy@bsstr.xyz.

Cookies

We use only essential cookies: your sign-in session and the visitor ID described above. We don't use advertising trackers.