# Privacy Policy — pufferboost

> What pufferboost collects, why, and who processes it. We never collect your social media password and we do not sell personal data.

Source: https://pufferboost.com/privacy/ · Language: en

---
Legal

# Privacy Policy

What we collect, why, and who else sees it.

Last updated: 3 August 2026

## The short version

We collect the minimum needed to take your order and deliver it: who you are, what you bought, and the public link you asked us to boost. We never collect your social media password. We do not sell your data.

## What we collect

- **Account** — your email address, and your name and avatar if your sign-in provider supplies them. Authentication is handled by Clerk; your password (if you use one) lives with them, not with us.
- **Orders** — the public post URL or @handle you submit, what you ordered, what you paid, and delivery progress.
- **Payments** — handled by Stripe. We store a payment reference, the amount and the status. We never see or store your full card number.
- **Technical** — server logs containing IP address, request path, status and timing, kept for security and debugging. MCP connection tokens are stored only as a hash, and tokens are redacted from our logs.
- **Analytics** — aggregate usage via Google Analytics and Google Ads conversion tracking.

## Why we can use it

To perform the contract you entered when you placed an order; for our legitimate interest in keeping the service secure and working; and, for analytics and advertising cookies, on the basis of your consent where that is required in your country.

## Who we share it with

Only the processors we need to run the service: **Stripe** (payments), **Clerk** (authentication), **JustAnotherPanel** (order fulfilment — it receives the public link and quantity, never your identity), **Netlify** and **Cloudflare** (hosting and delivery), **Amazon Web Services** (servers, Frankfurt), and **Google** (analytics and ads). We do not sell personal data.

## Where it lives

Our database runs on servers in the European Union (Frankfurt). Some processors listed above operate internationally, which can mean transfers outside your country under their own safeguards.

## How long we keep it

Order and payment records are kept while your account is open and afterwards for as long as tax and accounting rules require. Server logs are short-lived. Revoked MCP tokens keep only their hash and usage counters.

## Your rights

Depending on where you live, you can ask for a copy of your data, ask us to correct or delete it, object to processing, or ask for it in a portable form. Email [support@pufferboost.com](https://pufferboost.commailto:support@pufferboost.com) and we will respond within 30 days. Deleting your account does not remove records we must keep for accounting.

## Cookies

We use cookies that are strictly necessary for sign-in and checkout, plus analytics and advertising cookies from Google. You can block non-essential cookies in your browser without losing the ability to order.

## Children

The service is not intended for anyone under 16. We do not knowingly collect data from children; if you believe we have, contact us and we will delete it.

## Contact

Privacy questions or requests: [support@pufferboost.com](https://pufferboost.commailto:support@pufferboost.com).

[Terms of Service](https://pufferboost.com/terms) · [Privacy Policy](https://pufferboost.com/privacy) · [Refund & Refill Policy](https://pufferboost.com/refunds) · [Contact](https://pufferboost.com/contact)