Legal
Privacy Policy
Last updated: March 15, 2026
Youboxd takes the protection of your personal data seriously. This page explains what data we collect, how we use it and what your rights are.
Data collected
When you register and use Youboxd, we collect: • Display name, username and email address • Password (stored in hashed form — never in plain text) • Profile picture (optional, hosted on Cloudinary) • Sign-in via Google or X (Twitter): name, email, public profile picture • Published content: reviews, ratings, comments, tags • Activity data: likes, follows, bookmarks, notifications • Technical data: connection logs, IP address (not permanently stored)
Use of data
Your data is used exclusively to: • Provide and improve the Youboxd service • Personalize your experience (feed, suggestions) • Send you notifications related to your activity • Ensure service security and prevent abuse • Comply with our legal obligations Youboxd does not sell your data to third parties.
Cookies and trackers
Youboxd uses cookies to: • Maintain your authenticated session • Remember your preferences (language, consent) • Measure audience via Google Analytics (only with your consent) You can manage your cookie preferences from the consent banner or the Cookies page.
Data sharing
Your data may be shared with: • Our technical subcontractors (hosting Vercel, database Neon, images Cloudinary) • Google Analytics (audience statistics — only with consent) These partners are bound by contractual data protection guarantees. No data is sold to advertisers.
Data retention
Your data is retained for the duration of your account. If your account is deleted, your data is deactivated immediately and permanently deleted within 30 days. Connection logs and security data are retained for a maximum of 90 days.
Your rights
In accordance with the GDPR, you have the following rights: • Right of access: obtain a copy of your data • Right to rectification: correct inaccurate information • Right to erasure: delete your account and data • Right to portability: receive your data in a structured format • Right to object: oppose the processing of your data To exercise these rights, contact us at privacy@youboxd.com.
Security
We implement appropriate technical and organizational measures to protect your data: • Encrypted connections (HTTPS/TLS) • Passwords hashed with bcrypt • Data access limited to authorized personnel • Infrastructure hosted by certified providers In the event of a data breach, you will be notified within the legally required timeframe.
International transfers
Some of our providers (Vercel, Neon, Cloudinary) may process your data outside the European Union. These transfers are governed by standard contractual clauses compliant with the GDPR.
Amendments
This policy may be updated. In the event of a substantial change, you will be notified via the site. Continued use of the service after amendment constitutes acceptance of the new policy.
Questions about this policy or wish to exercise your rights? privacy@youboxd.com