Effective date: 12 July 2026. Version 2.0.
This Cookie Policy replaces all previous versions.
Please read this Cookie Policy carefully: it explains who we are, which cookies and similar technologies we use on our websites, why we use them, and what you can do about them. It should be read together with our Privacy Policy, which sets out how and why we collect, store, use and share personal information generally, your rights in relation to your personal information, and how to contact us and the supervisory authorities if you have a complaint.
Language of this policy
This Cookie Policy is published in English and also in German, French, Spanish, Italian, Dutch, Portuguese and Swedish. You may write to us about this Policy in any of those languages at gdpr@buyboosting.com. If there is any conflict between a translation and the English version, the English version prevails.
Who we are (controller)
Controller: BuyBoosting, the operator of this Website and of the Service ("BuyBoosting", "we", "us"). You can contact us about privacy and cookies at gdpr@buyboosting.com.
Supervisory authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), 1055 Budapest, Falk Miksa utca 9-11, Hungary, ugyfelszolgalat@naih.hu, www.naih.hu. You may also lodge a complaint with the supervisory authority in your EU country of residence. We ask that you contact us first at gdpr@buyboosting.com so that we can try to resolve your concern within 30 days.
Our website
This Cookie Policy applies to the websites we operate at buyboosting.com, buyboosting.de, buyboosting.es, buyboosting.fr, buyboosting.it, buyboosting.nl, buyboosting.pt and buyboosting.se (the "Website"). We are the controller of personal data collected through cookies and similar technologies on the Website.
Our Website uses a small number of third-party service providers that may set cookies or store information on your device. They are listed in the table below, and each of them acts under its own policy, which we link to. We do not serve advertising on the Website and we do not use advertising, retargeting or cross-site profiling service providers.
Cookies
A cookie is a small text file placed on your device when you use the Website. We also use similar technologies such as browser local storage and session storage; where we say "cookies" in this policy we mean all of them. We use them to keep you logged in, to remember the options you selected in our price configurator, to remember your language and currency, to verify that you are not an automated bot when you submit a form (Cloudflare Turnstile), and to process your payment securely (Stripe and PayPal). We measure how the Website is used with PostHog, which runs in cookieless mode and stores nothing on your device; that measurement is aggregated and does not identify you individually.
Consent
We only place cookies and similar technologies on your device that are strictly necessary to provide the service you have requested — logging you in, remembering your configurator and currency choices, protecting our forms from bots, and processing your payment. Under Article 5(3) of the ePrivacy Directive these do not require your consent, and their legal basis under the GDPR is the performance of our contract with you (Art. 6(1)(b)) and our legitimate interest in keeping the Website secure and preventing payment fraud (Art. 6(1)(f)).
We do not use advertising, cross-site tracking or profiling cookies. Our product analytics provider (PostHog, hosted in the European Union) runs in cookieless mode and does not store anything on your device. Our support chat (Yaplet) and "Sign in with Google" only load if you choose to use them; if you do not want them, simply do not open the chat and do not sign in with Google.
If we ever introduce non-essential cookies, we will first ask for your consent through a banner, you will be able to refuse without detriment, and you will be able to withdraw your consent at any time as easily as you gave it.
Our use of cookies
The table below lists every cookie and similar technology used on the Website and why:
We do not use Google Analytics, Google Ads, Microsoft Bing Ads, the Facebook/Meta pixel, Barion, or any advertising or cross-site profiling technology. We do not sell or share your data with advertisers.
Legal basis, retention and international transfers
Legal basis. Strictly necessary cookies and storage are used to perform our contract with you (GDPR Art. 6(1)(b)) and in our legitimate interest in securing the Website and preventing payment fraud and chargeback abuse (Art. 6(1)(f)); under the ePrivacy rules they do not require consent. Any non-essential technology would be used only with your consent (Art. 6(1)(a)), which you may withdraw at any time.
Retention. Each technology is retained for the period shown in the table above; server security logs are retained for 12 months.
International transfers. Our servers are located in Iceland (FlokiNET) and Germany (Hetzner), and our analytics provider PostHog stores data in the European Union. Cloudflare, Inc., Stripe, Inc. and PayPal are established in or transfer data to the United States. Where personal data is transferred outside the EEA, the transfer is made under the European Commission's Standard Contractual Clauses and/or the EU-US Data Privacy Framework, and you may request a copy of the safeguards at gdpr@buyboosting.com.
Fraud prevention and dispute defence
Our payment providers (Stripe and PayPal) and our bot-protection provider (Cloudflare Turnstile) collect technical information about your device and connection (including IP address, browser and device characteristics and a fraud/session identifier) when you place an order. We also retain server logs, order records and support-chat transcripts.
We process this data in our legitimate interest (GDPR Art. 6(1)(f)) in preventing payment fraud and abuse, and in establishing, exercising and defending legal claims — including responding to chargebacks, payment disputes and complaints — and, in respect of payment records, to comply with our legal accounting and anti-money- laundering obligations (Art. 6(1)(c)). Because this data may be needed to defend legal claims and to meet statutory retention duties, a request to erase it may be refused to the extent permitted by Article 17(3)(b) and (e) GDPR.
Order, payment and dispute records are retained for 8 years from the end of the accounting year in which the order was placed, as required by Hungarian accounting law; security logs for 12 months; support-chat transcripts for 24 months.
Third-party providers
Each third-party provider listed above sets its technologies under its own policy, which we link to below. We select our providers, contract with them under Article 28 GDPR data-processing agreements where they act on our behalf, and we review this list at each release. If a provider changes the technologies it uses, we will update the table above.
- Cloudflare: https://www.cloudflare.com/privacypolicy/
- Stripe: https://stripe.com/privacy
- PayPal: https://www.paypal.com/webapps/mpp/ua/privacy-full
- Yaplet: https://www.yaplet.com/privacy
- PostHog: https://posthog.com/privacy
- Google: https://policies.google.com/privacy
Turning off cookies and what happens if you do
You can block or delete cookies through your browser settings (see the help pages for Chrome, Firefox, Safari and Edge). Because the technologies we use are strictly necessary, blocking them will prevent parts of the Website from working: you will not be able to stay logged in, your configurator and currency choices will not be remembered, our bot protection will not be able to verify you, and you will not be able to complete a payment. This is a technical consequence of your browser settings, not a restriction we apply to your account.
Visitors in the United States
We do not sell or share personal information for cross-context behavioural advertising, and we do not use advertising or profiling cookies. We honour the Global Privacy Control (GPC) signal. If you are a resident of California or another US state with comparable privacy legislation, you may exercise your rights to know, delete, correct and opt out by writing to gdpr@buyboosting.com; we will not discriminate against you for exercising those rights.
Relationship to our other terms
This Cookie Policy is an information notice provided under Articles 12-14 GDPR and the ePrivacy rules. It is not a contract and does not create contractual rights or obligations. Your contract with us is governed exclusively by our Terms of Use, together with our Privacy Policy. If anything in this Cookie Policy appears to conflict with the Terms of Use, the Terms of Use prevail in respect of the contractual relationship between us, and nothing in this Cookie Policy limits or varies any right, remedy, refund mechanism or limitation of liability set out in the Terms of Use. Nothing in this Cookie Policy affects your mandatory rights as a consumer under the law of your country of residence.
How to contact us
If you wish to contact us about this policy or your personal data, please send an email to gdpr@buyboosting.com.
Changes to this policy
We may update this Cookie Policy from time to time, for example when we add or remove a service provider. The current version is always published on this page with its effective date and version number at the top. Where a change materially affects how we use cookies or similar technologies, we will bring it to your attention on the Website before it takes effect and, where the law requires it, we will ask for your consent again. Continued use of the Website after the effective date means you have been informed of the current version.