PRIVACY POLICY

Last updated: July 2026

Introduction

Boomm respects your privacy. This policy explains what personal data we collect when you use Boomm, how we use it, and the rights you have over it. Iceland is part of the EEA, so your data is protected under GDPR-equivalent standards no matter which portal of the site you’re using.

Data We Collect

Depending on how you use Boomm, we collect:

Account information — your name, email, username, avatar, bio, and location.
Listing content — for sellers, this includes photos, descriptions, and prices for the items you list.
Messages exchanged between buyers and sellers through the in-app messaging system.
Order and shipping address information for completed purchases.
Payment information — this is handled directly by Stripe; Boomm never stores your full card number.

How We Use Your Data

We use the data we collect to:

Operate the marketplace — matching buyers and sellers and processing orders.
Communicate with you — order updates, notifications, and customer support.
Prevent fraud and keep the platform safe for everyone.
Improve and develop the Boomm service over time.

Data Storage

Your data is stored with Supabase on servers based in Stockholm, Sweden — meaning your data stays within the EU/EEA at all times.

Cookies

Boomm uses session cookies to keep you signed in and to authenticate your account as you browse. For full details on the cookies we use, see our Cookie Policy.

Your Rights

Under GDPR, you have the right to:

Access the personal data Boomm holds about you.
Request correction of any inaccurate data.
Request deletion of your data — you can do this yourself anytime via Account → Danger Zone in your account settings.
Request an export, or a copy, of your data.

To make any of these requests, email us at hello@boomm.is.

Third Party Services

Boomm relies on a small number of trusted third-party services to operate:

Stripe — payment processing.
Resend — transactional email delivery.
Supabase — database, authentication, and file storage.
Vercel — application hosting.

Each of these providers only receives the data necessary to perform its function.

Children’s Privacy

Boomm is not intended for use by anyone under 18. Accounts are restricted to adults, in line with the eligibility requirements in our Terms of Service.

Changes to This Policy

We may update this policy from time to time. If we make a material change, it will be reflected by an updated “Last updated” date at the top of this page.

Contact

Questions about this policy or your data? Reach out to us at hello@boomm.is.

Data We Collect

Depending on how you use Boomm, we collect:

Account information — your name, email, username, avatar, bio, and location.

Listing content — for sellers, this includes photos, descriptions, and prices for the items you list.

Messages exchanged between buyers and sellers through the in-app messaging system.

Order and shipping address information for completed purchases.

Payment information — this is handled directly by Stripe; Boomm never stores your full card number.

Your Rights

Under GDPR, you have the right to:

Access the personal data Boomm holds about you.

Request correction of any inaccurate data.

Request deletion of your data — you can do this yourself anytime via Account → Danger Zone in your account settings.

Request an export, or a copy, of your data.

To make any of these requests, email us at hello@boomm.is.

Third Party Services

Boomm relies on a small number of trusted third-party services to operate:

Stripe — payment processing.

Resend — transactional email delivery.

Supabase — database, authentication, and file storage.

Vercel — application hosting.

Each of these providers only receives the data necessary to perform its function.