Privacy Policy
Effective October 22, 2026
CMR Web Development (“CMR Web Development,” “we,” “us”) operates booster-bingo.com. This policy explains what information the site collects, how it is used, and the choices you have. We keep it simple: we collect only what we need to run Booster Bingo, and we never sell it.
Information you give us
When you use the contact form, you provide your name, email address, phone (optional), club name, topic and message. We use this only to respond to you. Form submissions are delivered to our inbox by email through SMTP2GO - the website itself does not store them in the app database.
When you create an account or sign in, you provide an email address and may set a password. If you choose Google Sign-In, Google shares your name, email and profile image with us so we can create or match your account. Club owners can also invite people by email; those invited addresses are stored so we know who may join a club.
Accounts, clubs and demo data
Signed-in use of Booster Bingo stores club and game data in Neon, a hosted PostgreSQL database. That includes club names and settings, member roles, bingo games, and uploaded logos or fonts needed to print cards. Auth.js keeps session and sign-in records (including email magic-link tokens) so you can stay signed in.
The public demo creates a temporary sandbox club that expires and is deleted automatically. Demo sign-in credentials are generated for that visit and are not a lasting account.
Information collected automatically
Analytics (only with your consent). If you click “Accept” on our cookie notice, we use Google Analytics 4 to understand how visitors use the public site - pages viewed, how visitors arrived (for example a search engine or a link), general location (city or region), device and browser type. Google Analytics uses cookies to do this. We use this data only in aggregate to improve the site, not to identify individuals or for advertising. If you click “Decline,” Google Analytics does not load and no analytics cookies are set. Analytics is not loaded on private app, admin, demo, or insights pages. Learn how Google handles data at https://policies.google.com/privacy.
Search performance. We use Google Search Console to see which searches lead to the site. This data is aggregated by Google and does not identify individual visitors.
Server and security data. Our hosting provider, Vercel, processes standard technical information such as IP address, browser type and request times to deliver the site and protect it from abuse. Sign-in, contact and demo requests also use your IP address (and, for sign-in, your email) in a short-lived rate limit stored in Upstash Redis so we can slow down abuse. The insights dashboard login stores only a hashed key of the IP, not the IP itself, in a small rate-limit table that is not part of the main app schema.
Preferences. Your cookie choice is saved in your browser’s local storage so the site remembers it. It never leaves your device.
Cookies
The only cookies this site sets for public visitors for analytics are Google Analytics cookies (names beginning with “_ga”), and only after you click “Accept.” You can change your choice at any time using “Cookie settings” in the site footer - declining removes the analytics cookies. Signed-in use also sets session cookies so you stay logged in. You can block or delete cookies in your browser settings; the public site works without analytics cookies.
How we use information
- To respond to inquiries and run Booster Bingo for your club
- To understand and improve the public site’s content and performance
- To keep the site secure and prevent spam or abuse
We do not sell, rent or trade your personal information, and we do not use it for third-party advertising.
Sharing
We share information only with the service providers that help run the site - Google, Vercel, SMTP2GO, Neon, Upstash, Google Sign-In - as needed for them to provide their services, or when required by law.
Data retention
Contact form emails are kept in our inbox for as long as needed to communicate with you. Club and account data stay until the club or account is removed. Expired demo sandboxes are deleted by a daily cleanup. Google Analytics keeps detailed event data for 14 months and user-level data for 14 months, after which it is automatically deleted. Aggregated reports, such as monthly visitor totals, are not tied to individuals and may be kept longer.
Your choices
- Analytics: accept or decline on the cookie notice, and change your choice any time with “Cookie settings” in the footer.
- Cookies: block or delete cookies in your browser settings; the public site still works.
- Google’s opt-out: you can also use the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout.
- Your messages: ask us to delete any correspondence you have sent by emailing christian@cmrweb.dev.
Children’s privacy
Booster Bingo is intended for booster organizations and adults who run them. We do not knowingly collect personal information from children under 13.
Links to other sites
The site links to CMR Web Dev and other outside pages. Their privacy practices are their own and are not covered by this policy.
Changes to this policy
We may update this policy from time to time. The effective date at the top shows when it was last changed.
Contact
Questions about this policy? Contact Christian Rapp, CMR Web Development, Lehigh Acres, Florida, at christian@cmrweb.dev.