What we keep, what we don't.

What we collect

• Email address — when you sign in. We use a magic-link, so no password is stored.
• Reviews you write — text, star rating, the business you reviewed, and any photos you attach.
• Bookmarks (saved places).
• Helpful votes and reportsyou make on other people's reviews.
• Basic profile — your username, an optional display name, an optional bio.
• Activity timestamps— when you last signed in, when reviews were posted. This is how the trust system tells “new account dropping five reviews in an hour” apart from “regular over a year.”
• Anonymous web logs — your browser sends a user-agent and an IP address when you load a page. These roll up in normal hosting logs.

What we don't collect

• No passwords (sign-in is magic-link only).
• No payment information.
• No third-party advertising trackers.
• No social media pixels.
• No precise location unless you tap “Find nearby” — that uses your ZIP, kept only for the duration of the search.

Who sees your data

• Reviews you post are public by design — the whole point of the site. Your username appears on every review you write.
• Bookmarks, your email address, and your activity log are private. Only you and the boostsmall team see them.
• Verified business owners can see who reviewed their place (the username already on the review). They can't see your email, bookmarks, or activity.
• We don't sell your data. We never have. If that ever changes, this page changes first, and you'll get an email.

Service providers we use

Running the site means handing some data to companies whose tools we run on. Each one is contracted to keep your data confidential.

• Vercel — hosts the website. Sees normal request logs.
• Neon — runs the database that stores accounts, reviews, bookmarks.
• Resend — sends sign-in emails and new-review notifications to verified owners.
• UploadThing — stores photos you upload to your reviews or your business listing.
• Mapbox — renders the map on /search. Sees your IP when you load the map.

Cookies

One cookie for sign-in (so you stay logged in) and one cookie for protection against forged form submissions. No tracking cookies. No analytics cookies. We don't need a cookie banner because we don't set cookies that need consent under GDPR or California rules.

Your rights

• See everything we have on you— email us and we'll send a download.
• Delete your account — email us. Reviews you wrote will either be removed or kept anonymously (your choice).
• Fix something wrong— edit your profile any time, or email us if it's something you can't edit yourself.

Kids

boostsmall is not for people under 13. We don't knowingly collect data from kids. If you find an account that shouldn't be here, report it and we'll handle it.

Changes to this policy

If we make any material change to how we handle your data, we'll update this page and email everyone with an account at least 14 days before the change takes effect.