Privacy Policy

Who we are

Boomer Box (the “Site”) is operated by [Legal Entity Name] (“we,” “us,” “our”). You can reach us at contact@boomerbox.example.

This policy explains what we collect when you visit boomer-box.vercel.app or boomerbox.com, how we use it, and what choices you have. It applies only to data collected through this Site.

What we collect

• Email address. When you submit the waitlist form, we collect the email you give us.
• Source identifier. A non-personal label (“hero,” “footer,” “box-builder”) tells us which form on the Site you used. This helps us understand which parts of the page resonate.
• Server logs. Our hosting provider (Vercel) automatically records standard server-log information — IP address, user-agent, timestamp, requested URL — when your browser makes a request. These logs are kept by Vercel under their data-retention policy and are used for security, abuse prevention, and debugging.

In our own application logs, your email address is masked (for example, c***@gmail.com) before being written, so plaintext emails are not retained in our serverless function logs.

We do not run analytics scripts. We do not set tracking cookies. The Site does not use cookies for any purpose other than what is strictly necessary for the hosting infrastructure to function.

Privacy-by-design measures

A few choices we’ve made on the technical side:

• Self-hosted fonts. The Site’s fonts are served from our own domain. We do not use the Google Fonts CDN, so your IP address is not shared with Google for font requests.
• No third-party scripts or trackers. No analytics, no advertising tags, no social-media pixels, no fingerprinting libraries.
• Strict security headers. We send Referrer-Policy: strict-origin-when-cross-origin so external sites you click through to don’t see what page you came from beyond our domain. We send a Permissions-Policy that disables sensors (mic, camera, geolocation, etc.) and opts out of the FLoC / Topics interest-cohort APIs. We send a strict Content-Security-Policy to prevent rogue scripts from loading.
• Spam mitigation without tracking. The waitlist form uses a hidden honeypot field and a time-to-submit check rather than a tracking-based CAPTCHA.

How we use what we collect

• To email you when Boomer Box launches and to share early-access information you signed up for.
• To estimate demand and decide which boxes and items to ship first.
• To prevent abuse — for example, detecting bot signups.

We do not sell your email. We do not share it with advertisers.

Service providers

We will, in the near future, use one or more of the following processors to deliver waitlist emails:

• An email service provider (for example, ConvertKit, Buttondown, or Resend).
• Vercel, which hosts the Site and runs the function that receives waitlist signups.

When we begin using an email provider, we will update this policy and the provider will receive your email address solely to send you the messages described above.

Retention

We keep your email until the earlier of:

• six months after our public launch, or
• you ask us to remove you (see “Your rights” below).

Your rights

You can email contact@boomerbox.example at any time to:

• see what we have on file for you,
• correct it,
• delete it, or
• opt out of future emails.

If you live in the EU, the UK, California, or another jurisdiction with specific data-protection rights (GDPR, UK GDPR, CCPA / CPRA, etc.), those rights apply to you and we will honor them. If you believe we’ve handled your data unlawfully, you have the right to lodge a complaint with your local supervisory authority.

Children

This Site is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has submitted information through this Site, please contact us and we will delete it.

International users

The Site is hosted in the United States. By using the Site you understand that your information will be processed in the United States, which may have different data-protection rules than your home country.

Changes to this policy

We may update this policy. The “Last updated” date at the top of this page will reflect the latest revision. Material changes will be communicated to anyone on the waitlist via email before they take effect.

Contact

Questions, requests, or complaints: contact@boomerbox.example.