Draft โ requires legal review
Privacy Policy
Effective date: 2026-03-20 ยท Version 1.0
Bootekol is an image browsing platform. We believe in anonymity by default and collect only the data we need to keep the site running. This policy explains what we collect, why, and what rights you have over it.
1. Data we collect
Right now (anonymous browsing)
- Analytics. We use Cloudflare Web Analytics, which collects aggregated, anonymous page-view data. It does not use cookies, does not track you across sites, and does not collect personal information.
- Server logs. Cloudflare and our infrastructure may temporarily log IP addresses and request metadata for security and abuse-prevention purposes. These logs are retained for a limited period and are not used for profiling.
- Age verification. We store a cookie to remember that you confirmed you are of legal age. This cookie contains no personal data.
When you create an account (coming soon)
- Account data. Email address, username, and a securely hashed password. We never store your password in plain text.
- Activity data. Votes, favorites, and other interactions you choose to make. This data is tied to your account.
- Session cookie. A session identifier stored in a cookie to keep you logged in. It contains no personal information beyond a random token.
2. How we use your data
- To operate and improve the site (page loads, content ranking, search).
- To remember your preferences and session state.
- To prevent abuse and enforce our terms of service.
- To generate aggregated, non-identifying usage statistics.
- In the future, to support monetization features (e.g. premium accounts). We will update this policy before introducing any new data collection.
3. Cookies
We use a small number of cookies, all strictly functional:
| Cookie | Purpose | Duration |
|---|---|---|
| age_ok | Remembers your age confirmation | 1 year |
| session | Keeps you logged in (accounts only) | 30 days |
We do not use advertising cookies, tracking pixels, or any third-party tracking scripts.
4. Third-party services
- Cloudflare. Our site is served through Cloudflare, which provides CDN, DDoS protection, and privacy-respecting analytics. Cloudflare may process request metadata (IP address, headers) as part of its services. See Cloudflare's privacy policy.
We do not sell, rent, or share your personal data with any other third parties.
5. Data storage and retention
- Image metadata and tags are stored in Cloudflare D1 (SQLite) and cached in Cloudflare KV.
- Images are stored in Cloudflare R2 (object storage).
- Account data (when available) is stored in Cloudflare D1.
- Session data is stored in Cloudflare KV and expires automatically.
- Infrastructure logs are retained by Cloudflare per their retention policies.
If you delete your account, we will remove your personal data within 30 days. Some anonymized, aggregated data may be retained.
6. Your rights
If you are in the European Economic Area (EEA), the UK, or another jurisdiction with similar data-protection laws, you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate data.
- Erase your data ("right to be forgotten").
- Restrict or object to certain processing.
- Port your data to another service in a machine-readable format.
- Withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, contact us at the address below. We will respond within 30 days.
7. Children's privacy
Bootekol contains adult content and is not intended for anyone under 18 years of age (or the age of majority in your jurisdiction). We do not knowingly collect data from minors. If we discover that a minor has provided personal data, we will delete it promptly.
8. Changes to this policy
We may update this policy from time to time. When we do, we will revise the effective date at the top. If changes are significant, we will make reasonable efforts to notify you (e.g. a banner on the site). Your continued use of Bootekol after changes take effect constitutes acceptance of the updated policy.
9. Contact
If you have questions about this policy or want to exercise your data rights, reach us at: