Privacy Policy

The controller of your personal data is [company legal name], [registered address]. For any privacy question write to support@goodgameboost.com.

• Account: username, e-mail address, password (stored only as a bcrypt hash — we cannot see it), preferred language.
• Security: two-factor authentication secret (stored encrypted), backup codes, e-mail confirmation and password reset tokens (codes and tokens are stored only as hashes).
• Orders: the service and options you chose, prices, order status history, the booster's progress updates and screenshots, ratings and reviews.
• Game account details you provide for an order: stored encrypted, with a record of who viewed them, and deleted when the order ends.
• Messages you send in order chats.
• Payments: amount, method and the payment ID of the provider. Card and PayPal details are handled by Stripe and crypto payments by NOWPayments — we never see your card number.
• Withdrawals: the payout method and details you enter (PayPal or Wise e-mail, wallet address or bank account).
• Booster applications: games, ranks, profile links, rank screenshots, experience, region, languages, time zone, Discord username and moderators' decisions.
• Notifications and copies of the e-mails we send you.
• Technical data: your IP address is used briefly in memory to limit repeated sign-in attempts and is not saved in our database. For administrator actions we record the IP address in the audit log. Our hosting provider may keep standard server logs.

• To provide the service under our Terms of Service: accounts, orders, chat, escrow, payments, payouts and dispute resolution.
• To keep the platform secure and prevent fraud: sign-in limits, 2FA, verification of boosters, the audit log of administrator actions (our legitimate interest).
• To meet legal obligations, such as keeping financial records.
• To send service e-mails: account confirmation, password reset, order updates, dispute decisions and payout notices. E-mails about new chat messages are sent at most once every 30 minutes per order. We do not send marketing e-mails.

We do not sell personal data, do not build advertising profiles and do not make decisions about you by fully automated means.

• Other users: your public profile shows your username, rating and reviews. Your e-mail address is never shown publicly.
• The booster assigned to your order sees the order details and chat, and — only while working on the order — the game account details you provided.
• Our administrators and arbiters, when needed to verify boosters, process payouts, resolve disputes or protect accounts. Sensitive actions are recorded in an audit log.
• Service providers who process data on our behalf: Supabase (database hosting), Resend (e-mail delivery), Stripe (card and PayPal payments), NOWPayments (crypto payments) and [hosting provider] (website hosting).
• Authorities, when we are legally required to share data.

Some providers may process data outside your country. In that case we rely on appropriate safeguards, such as the European Commission's standard contractual clauses.

• Game account details — until the order is completed, cancelled or refunded, or the booster declines it.
• Unpaid orders are cancelled after 24 hours. E-mail confirmation links work for 24 hours, password reset links for 1 hour.
• Account data — while your account is active and [retention period] after it is closed.
• Payment and transaction records — as long as accounting and tax laws require.

Encrypted connections (HTTPS), password hashing, AES-256-GCM encryption for game account details and 2FA secrets, two-factor authentication, limits on repeated attempts, the option to sign out on all devices, protective HTTP headers and a log of administrator actions. No system is perfectly secure, so please also use a unique password and turn on 2FA.

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to its use, receive it in a portable format and withdraw consent. To use these rights, write to support@goodgameboost.com from the e-mail address of your account. We answer within one month.

We may need to keep some records even after deletion, for example payment records required by law. You can also complain to [data protection authority] or the data protection authority of your country.

We use only cookies that are needed for the site to work. There are no analytics, advertising or tracking cookies, so there is nothing to opt out of — the cookie notice is for information only.

• authjs.session-token — keeps you signed in. Up to 30 days. Set when you sign in.
• authjs.csrf-token — protects sign-in forms against forged requests. Until you close the browser.
• authjs.callback-url — returns you to the right page after signing in. Until you close the browser.
• NEXT_LOCALE — remembers the language you chose. 1 year. Set only when you switch the language.

On the live site, sign-in cookie names start with “__Secure-” or “__Host-”. We also save a note in your browser's local storage that you have closed the cookie notice. When you pay, the pages of Stripe or NOWPayments may set their own cookies under their privacy policies. You can block cookies in your browser settings, but then signing in will not work.

GoodGameBoost is not intended for people under [minimum age]. We do not knowingly collect their data.

We will update this policy when we change how we handle data and will notify you by e-mail about important changes. The date of the current version is shown at the top of this page.