Privacy Policy
- 1. Who We Are
- 2. Data Controller
- 3. What Data We Collect
- 3.1. Data You Provide
- 3.2. Data We Collect Automatically
- 4. Why We Use Your Data
- 5. Cookies
- 6. Who Receives Your Data
- 7. How Long We Keep Your Data
- 8. Your Rights Under GDPR
- 9. Security
- 10. Data Transfers Outside the EU
- 11. Contact Information
- 12. Changes to This Policy
- 13. Key GDPR Principles We Follow
- 14. Legal Basis for Processing
- 15. Special Data Categories
Effective Date: January 16, 2026
Last Updated: January 16, 2026
1. Who We Are
This Privacy Policy explains how we collect, use, process and protect your personal data in accordance with the General Data Protection Regulation (GDPR) (EU Regulation 2016/679) and the ePrivacy Directive (2002/58/EC).
This policy applies to all users of our website and services who are located in the European Union or European Economic Area (EEA).
2. Data Controller
Organization Name: BOOSTED MOONBOT PARTNER
Address: 3rd Floor, Genesis House, Unit 18, Genesis Close, George Town, P.O. Box 10655, Grand Cayman KY1-1006, Cayman Islands
Email for Privacy Questions: [email protected]
If you have any questions about this Policy or our data protection practices, please contact us using the above information.
3. What Data We Collect
3.1. Data You Provide
You may voluntarily provide us with any information you type into the website (for example, search queries or other input).
3.2. Data We Collect Automatically
When you visit our website, we automatically collect
-
IP address – used to determine your country (to select the appropriate video provider: YouTube or RuTube), for security, and basic analytics
-
Session data – session ID and your preferred video provider; session lifetime is up to 120 minutes
-
Session cookie – http_only and same_site=lax; required for the site to function
-
Referer URL – the page you came from
-
Error logs – information about errors, including IP address and request data; stored for 14 days for daily logs
Anonymous analytics data
We collect anonymous data about website usage through analytics services in accordance with analytics, statistical research, and marketing agreements. This data is anonymized and does not allow us to identify you personally.
For more details on the terms of use of Google Analytics at https://www.google.com/analytics/terms/
4. Why We Use Your Data
We process your data for
-
Making the website work
-
Remembering your settings (such as video provider preference)
-
Determining your location to show you the correct video provider
-
Protecting the site from abuse and technical problems
-
Analyzing how the site is used so we can improve it
Legal basis under GDPR:
-
Legitimate interest (Article 6(1)(f)) – to ensure security, stability and proper operation of the website
-
Consent (Article 6(1)(a)) – when required, such as for optional analytics without anonymous mode
5. Cookies
We only use one strictly necessary session cookie (with http_only and same_site=lax) to keep the website running and remember basic settings like your preferred video provider.
This cookie is required for the site to function properly and is not used for advertising or tracking.
In your browser:
-
You can delete or block cookies in your browser settings
* If you block necessary cookies, some features of the site may not work correctly
6. Who Receives Your Data
6. Who Receives Your Data
Your data may be shared with
-
YouTube API – to import and display playlists and videos
-
Meilisearch / Algolia – to enable the search feature on the site
-
Database provider – to store and process information securely
All of these services have signed Data Processing Agreements (DPA) with us and must follow GDPR rules.
7. How Long We Keep Your Data
We keep personal data only as long as needed
-
Session data and session cookie – up to 120 minutes, then automatically deleted
-
Error logs – 14 days for daily logs; individual logs may be kept longer if needed for investigation
-
IP addresses in logs – kept for the same period as the logs
-
Other data – for the period necessary for the purposes of processing, or until you ask for them to be deleted
8. Your Rights Under GDPR
If you are in the EU/EEA, you have the following rights
Right of access – You can ask for a copy of your personal data and information about how we use it.
Right to rectification – You can ask us to correct inaccurate or incomplete data.
Right to erasure – You can ask us to delete your data in certain situations (for example, if it is no longer needed).
Right to restrict processing – You can ask us to temporarily limit how we use your data.
Right to object – You can object to processing based on our legitimate interests.
Right to data portability – You can ask for your data in a machine-readable format (for example, CSV) that you can move to another service.
Right to withdraw consent – If we process data based on your consent, you can withdraw that consent at any time.
How to exercise your rights:
Send a written request to [email protected]. Include your name, email, and a clear description of what you want. We will respond within 30 days.
Right to lodge a complaint:
If you believe your rights have been violated, you can complain to your local data protection authority in the EU/EEA.
9. Security
We use industry-standard technical measures to protect your data, including
-
Encrypted connections (HTTPS/SSL)
-
http_only and same_site=lax flags on cookies
-
Limited access to data (only authorized staff can see it)
-
Encrypted storage in our database
However, no system is 100% secure. We recommend using secure networks and devices when accessing the site.
If there is a data breach
If a security incident compromises your data, we will:
-
Investigate immediately
-
Notify your country's data protection authority within 72 hours (if required)
-
Notify you if there is a high risk to your rights and freedoms
10. Data Transfers Outside the EU
Some of our service providers (such as YouTube) may be located outside the EU/EEA. When we transfer data outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCC) or adequacy decisions.
11. Contact Information
For privacy questions
-
Email: [email protected]
-
Address: 3rd Floor, Genesis House, Unit 18, Genesis Close, George Town, P.O. Box 10655, Grand Cayman KY1-1006, Cayman Islands
To complain to your data protection authority
If you believe your rights have been violated, you can file a complaint with your country's data protection authority. Here are some examples:
-
Germany: Bundesbeauftragte für Datenschutz und Informationsfreiheit (BfDI) – https://www.bfdi.bund.de
-
France: Commission Nationale de l'Informatique et des Libertés (CNIL) – https://www.cnil.fr
-
Spain: Agencia Española de Protección de Datos (AEPD) – https://www.aepd.es
-
Netherlands: Autoriteit Persoonsgegevens (AP) – https://www.autoriteitpersoonsgegevens.nl
-
Italy: Garante per la protezione dei dati personali – https://www.garanteprivacy.it
12. Changes to This Policy
We may update this policy from time to time. The latest version will always be available on this page with an update date. For significant changes, we will notify you via a banner on the site (if applicable). Your continued use of the website means you accept any changes to this policy.
13. Key GDPR Principles We Follow
Lawfulness, fairness and transparency – We process data fairly and transparently, with a clear legal basis.
Purpose limitation – We only use data for the purposes stated in this policy.
Data minimization – We only collect data we actually need.
Accuracy – We keep your data accurate and remove outdated information.
Storage limitation – We don't keep data longer than necessary.
Integrity and confidentiality – Your data is protected from unauthorized access and loss.
Accountability – We can prove we follow these principles.
14. Legal Basis for Processing
We process your data under these legal bases (GDPR Article 6)
-
Legitimate interest (Article 6(1)(f)) – to maintain site security, prevent abuse, and improve the service
-
Consent (Article 6(1)(a)) – when we ask for your permission
We do not use profiling or fully automated decision-making that would have legal or significant effects on you.
15. Special Data Categories
We do not collect special categories of personal data such as:
-
Race or ethnicity
-
Political opinions
-
Religious beliefs
-
Trade union membership
-
Genetic data
-
Biometric data
-
Health information
-
Sexual orientation
Last Updated: January 16, 2026