Privacy Policy

This policy explains what personal data BoostPirate collects and how we use it, consistent with the GDPR and Norwegian data-protection law.

Data we collect

Account data (email, display name, country, optional phone/Discord/Telegram); game profile data you add (public usernames, profile URLs, ranks); order and payment records; support and chat messages; and technical data (IP, device, sessions) used for security.

What we never store

We never store your Steam, FACEIT, WARDOGS, Riot or other third-party account passwords on your website profile. A game login you share for a piloted order is encrypted at rest, visible only to the assigned booster while the order is active, and deleted automatically when the order closes.

Cookies

We use strictly necessary cookies for sign-in, security (CSRF) and your consent choice. Analytics and advertising-measurement cookies (Google Analytics and Google Ads) are only set after you accept them in the cookie banner, and you can change your choice at any time with the “Cookie settings” link in the footer. If you decline, nothing is sent to Google Analytics.

Analytics (Google Analytics)

If you accept analytics cookies, we use Google Analytics 4 to understand how visitors find and use the site: the pages you view (with order numbers, sign-in tokens and personal query parameters removed from the address), how you arrived (for example a search engine or a campaign link), your device and browser type, your approximate location (country and city — Google Analytics does not log or store IP addresses), and shop events: viewing a service, starting checkout, completing an order (order number, service and amount), creating an account and sending a booster application. We never send Google your name, e-mail address, account details, game logins or chat messages. Google Analytics runs on public pages only — never in your account, the order chat, the booster work area or the admin area. Google signals and ad personalisation are switched off. Google (Google Ireland Limited) processes this data for us as a processor; it may be transferred to the United States under the EU–US Data Privacy Framework. Analytics data is kept for 14 months.

How we use it

To provide the service (create accounts, process orders, match boosters, handle payments and support), to keep the platform secure (fraud prevention, login alerts), and — only with your consent — to send marketing.

Launch alerts and marketing email

Marketing email is opt-in. If you ask to be told when a new game launches we store your email address, the game you chose and the time you confirmed; guests confirm by clicking a link we email first (double opt-in), and we send one email on launch day. We may also send, at most once, a note to past customers who opted in and have not ordered for a while. Every such email carries a one-click unsubscribe link, and signed-in customers can switch marketing email off under Email preferences at any time. We don't e-mail reminders before season starts or resets.

Legal bases

Performance of a contract (orders), legitimate interests (security, fraud prevention, review invitations after a completed order), consent (marketing e-mail, analytics and advertising-measurement cookies), and legal obligations (tax/accounting records).

Live chat assistant (BoostBot)

When you type a question to BoostBot in the live chat, that question and the last few messages of the same BoostBot conversation are sent to Anthropic (Anthropic PBC) so its Claude model can write the answer from our own site information. Anthropic acts as our processor and may process the text in the United States. We keep only daily counts of questions, not the questions themselves. Please don't type passwords, logins or payment details in the chat. Conversations with a person on our support team are not sent to Anthropic.

Sharing

With the assigned booster (limited order data), our payment processor (Stripe — card details never touch our servers), our identity-verification provider for boosters (Stripe Identity), our email delivery provider (Resend), Google (Google Analytics and Google Ads — only after you accept those cookies), our review platform (Trustpilot — after a completed order it receives your name, e-mail address and order number so it can send you one verified review invitation, if you receive order-update e-mails), Anthropic (only the questions you type to BoostBot), and hosting providers acting as processors. We do not sell your personal data.

Your rights

You can access, export, correct, or delete your data from Privacy settings, withdraw consent, and lodge a complaint with your data-protection authority (in Norway, Datatilsynet).

Data controller & contact

The data controller for your personal data is BoostPirate (Norway). For any privacy request — access, correction, deletion, or a complaint — email support@boostpirate.com and we will respond within the timeframes required by the GDPR.

Retention

We keep order and financial records as required by law, and anonymize other personal data on account deletion. Google Analytics data is deleted automatically after 14 months.