Legal
Privacy Policy
This Privacy Policy explains how the operator of boostmyfps.com collects, uses, stores, and shares personal data when you create an account, buy, activate, or use the tool.
1. Controller and Contact
For the purposes of applicable data protection law, the individual operator in Denmark trading as XD Software is the controller of the personal data described in this policy.
Privacy and account questions can be sent to support@boostmyfps.com.
2. Personal Data We Collect
In normal operation, the personal data we directly maintain for a user account is intentionally limited. This may include:
- your Discord user identifier, username, display name and avatar; Discord is the only sign-in provider, and we do not request your email address;
- license grants, promo redemptions, service requests, device-reset requests and the information you submit with them;
- a pseudonymous Windows installation identifier used to manage your one-PC license; the server stores a keyed hash rather than the raw Windows identifier;
- hashed session credentials, sign-in and activity times, and administration audit records; and
- keyed hashes derived from connection IP addresses for rate limiting. Cloudflare also processes connection information to serve and protect the site.
When purchasing the software license, Polar handles checkout, payment details, billing information and applicable sales taxes as merchant of record. We send your internal account identifier and display name to associate the purchase with your Discord account. We store order identifiers, amounts, tax and refund totals, payment status and timestamps to deliver and manage access. We do not store card details. Personal tuning sessions are request-only and are not sold through this checkout.
If you contact support, we may process the information you choose to include in your message so we can assist you.
3. How We Use Personal Data
We use personal data for the following purposes:
- to create and manage user accounts and licenses;
- to authenticate and enforce one-machine license limits;
- to provide access to the tool, updates, and related support;
- to connect or verify Discord access where offered;
- to protect the platform against fraud, abuse, unauthorized use, and security incidents;
- to communicate essential service, account, licensing, and support information; and
- to comply with legal obligations and enforce our contractual rights.
4. Lawful Bases for Processing
Where GDPR, UK GDPR, or similar laws apply, we typically rely on one or more of the following legal bases:
- Contract: to create your account, provide the license you purchased, activate the tool, and deliver support reasonably connected to that service.
- Legitimate interests: to secure the service, prevent abuse, manage licensing, investigate technical issues, and keep the platform reliable.
- Legal obligation: where we must keep or disclose information to comply with law, regulation, tax, accounting, or lawful requests.
- Consent: where consent is specifically requested for an optional feature or communication, and only to the extent required by law.
5. Sharing of Personal Data
We do not sell personal data. We may share personal data only where reasonably necessary, including with:
- hosting, infrastructure, and security service providers;
- payment processors used to complete purchases and verify transactions;
- communication or support providers, including Discord-related integrations where you choose to use them;
- professional advisers where necessary for legal, accounting, or compliance purposes; and
- courts, regulators, or authorities where disclosure is legally required or reasonably necessary to protect our rights.
We require service providers to handle personal data under appropriate confidentiality and security obligations.
6. International Transfers
Some service providers may process personal data outside your home country. Where applicable law requires it, we use appropriate safeguards for international transfers, such as adequacy decisions, contractual protections, or equivalent lawful transfer mechanisms.
7. Retention
We keep personal data only for as long as reasonably necessary for the purposes described in this policy, including licensing, support, security, fraud prevention, recordkeeping, and legal compliance.
- account and license records are typically kept while your account or license remains active and for a limited period afterward;
- hardware ID and related security data are kept for as long as needed to manage license enforcement, fraud prevention, and dispute handling;
- IP and security logs are usually retained for a shorter period unless needed for incident review, abuse prevention, or legal claims; and
- certain transactional or accounting records may be kept longer where required by law.
8. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal data against unauthorized access, disclosure, alteration, and destruction. These measures may include access controls, least-privilege practices, secure storage, and encryption in transit and at rest where appropriate.
No system is completely secure, so we cannot guarantee absolute security. If we become aware of a serious breach affecting personal data, we will respond in line with applicable legal requirements.
9. Your Rights
Depending on where you live, you may have rights to:
- request access to the personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request deletion of data in certain circumstances;
- request restriction of processing;
- object to certain processing based on legitimate interests;
- request portability of data you provided to us where applicable; and
- withdraw consent where processing is based on consent.
You may also have the right to complain to the data protection authority or supervisory authority in your country or region.
In Denmark, you can contact Datatilsynet at datatilsynet.dk. Your account dashboard includes an account data download and a form to request access or deletion. You can also send requests to support@boostmyfps.com. Requests are reviewed by the operator; the account download is not a complete response to every personal data access request.
10. Children
The service is not directed to children under 16, and we do not knowingly collect personal data from children under 16. If you believe a child has provided personal data to us, contact us and we will review and remove it where appropriate.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to the product, our practices, or legal requirements. When we make material changes, we will update the date at the top of this page and, where appropriate, provide additional notice.