Cookie Policy
Effective Date: March 13, 2026 | Last Updated: March 13, 2026
1. What Are Cookies
Cookies are small text files stored on your device by your web browser. They are commonly used to maintain sessions, remember preferences, and track usage. This policy explains what cookies and similar technologies Boostt uses.
2. Our Approach
Boostt uses minimal cookies. We do not use third-party analytics cookies (such as Google Analytics), advertising cookies, tracking pixels, or any form of cross-site tracking. We do not serve targeted advertisements or share cookie data with advertisers.
3. Cookies We Set
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
| _my_app_session | Server-side session for admin and server-rendered pages. Maintains your login state when accessing admin features. Not used on the main public-facing application. | Strictly necessary | Browser session |
| csrf_state | CSRF protection during TikTok OAuth login. Set only when you initiate a TikTok login and used to verify the callback is legitimate. | Strictly necessary | 1 hour |
| cc_cookie | Stores your cookie consent preferences (which categories you accepted or declined). This cookie is set by our consent banner and is itself exempt from consent requirements. | Strictly necessary | 182 days |
4. Browser Storage (Not Cookies)
The main Boostt application (the map, profiles, and marketplace at boostt.org) does not use cookies for authentication or user preferences. Instead, it uses:
- localStorage: Stores your login session (a JWT authentication token and basic profile data) so you remain logged in between visits. This data stays on your device and is never sent to third parties.
- sessionStorage: Temporarily stores OAuth flow state (e.g., that you are in the process of connecting TikTok or Instagram). This data is cleared when you close the browser tab.
localStorage and sessionStorage are browser technologies that, unlike cookies, are not automatically sent with every HTTP request. They are accessible only by our application and are not shared with any third party.
5. Server-Side Analytics
We collect anonymous usage data (pages visited, approximate location from IP address, referrer) server-side to understand how the Platform is used. This tracking:
- Does not use cookies or browser-based tracking scripts
- Uses a one-way hash of your IP address (the original IP is not stored)
- Does not track logged-in users by default
- Is not shared with any third party
- Is used solely for internal analytics (visitor counts, geographic demand, signup rates)
6. Third-Party Embeds
We do not set third-party cookies ourselves. However, some pages display embedded content from TikTok or Instagram (e.g., creator profile cards). When loaded, these embeds may set their own cookies according to their own policies. We require your consent before loading these embeds. If you decline, the embeds are not loaded and no third-party cookies are set.
Refer to the respective cookie policies of TikTok and Instagram for details on what cookies they set.
7. Managing Your Preferences
When you first visit the Platform, a cookie consent banner lets you choose which categories to accept:
- Strictly necessary (always on): Session and CSRF cookies required for the Platform to function. These cannot be disabled.
- Embedded content (optional): TikTok and Instagram profile embeds. You can enable or disable these at any time.
You can change your preferences at any time by clicking "Cookie preferences" in the page footer, or through your browser settings. You can also clear localStorage to log out, or block cookies entirely (which will prevent access to admin features but will not affect the main application).
9. Changes to This Policy
If we change our cookie practices, we will update this policy and the "Last Updated" date above. For questions about this policy, contact us at phaethon@boostt.org.