Privacy
Last updated: October 2026
Boo Chain is built to know as little about you as possible. No accounts, no cookies, no ads.
What we never collect
- Names. The first names on a card live only in the part of the link after the
#. Browsers never send that part to our server, so we never see or store them. - IP addresses. We don't store them. They are used for a moment to stop spam (rate limits), and to count reports one per person (as a one-way scrambled code that can't be turned back into an address or linked across cards).
What we store
- For each card: its design and style, which preset message it uses, which card it came from, the country it was sent from or opened in (from our host, not your exact location), and when.
- Counts of how often a card was opened, revealed and shared, to show how far a chain has travelled.
- A random tracker code, so you can see how far your own boos went.
- Your email address, only if you ask to hear about Gold Boos. We use it once to tell you they've launched, then delete it.
On your device
Your browser remembers your tracker code and which cards you sent or opened (local storage, not cookies), so your own visits aren't counted as opens. Clearing your browser data removes it.
Card pictures
The pictures on Boo Chain cards are AI-generated by us in advance and reviewed by hand. They show costumes, pumpkins and cats, never real people, and every one is labelled as AI-generated, both visibly on the card and inside the image file. Names are drawn on top by your browser; they are never sent to an image service.
Who processes it
The site runs on Cloudflare (hosting and database). We don't sell or share data with anyone else.
How long we keep it
Detailed events are deleted on 1 December 2026. Card and chain counts may be kept as anonymous totals.
Children
Boo Chain is family-friendly but not directed at children under 13.
Your rights and contact
To delete your waitlist email or ask anything about your data, email privacy@example.com. The operator is based in the European Union, and the GDPR applies.