Data Deletion Instructions

This page explains how to request deletion of personal data held by Boomfire when you use Boomfire (the "Service"), including data we receive when you sign in with Google or Facebook. It satisfies third-party platform requirements (for example Google OAuth) for apps that access user data.

1. What we delete

Depending on your request, we delete or anonymize:

• Account data: email address, display name, password hash (if set), profile avatar URL, theme and appearance settings, and session records.
• Dashboard content: widgets, layouts, notes, bookmarks, RSS subscriptions, feed read state, and other content stored in your account.
• OAuth sign-in data: links between your account and Google or Facebook identifiers, plus OAuth tokens we store for sign-in (not third-party integration apps you configure separately).
• Support communications tied to your account, where retention is not required by law.

We may retain minimal records where required for legal compliance, fraud prevention, or enforcing our terms. Backups may retain deleted data for a limited period before they are overwritten. See our Privacy Policy for retention details.

2. Delete your account and server-side data

To request full deletion of your account and associated data:

1. Email support@boomfire.com from the address linked to your account (or tell us which sign-in provider you used).
2. Use the subject line Account deletion request and include your account email or username if different from the sender address.
3. We verify ownership (for example by replying to your registered email) and confirm when deletion is complete, usually within 30 days.

You may also contact legal@boomfire.com for privacy-related requests under GDPR or other applicable law.

3. Disconnect Google or Facebook sign-in

If you want to remove OAuth sign-in without deleting your entire account:

1. Sign in to Boomfire.
2. Open Settings and go to the Security tab.
3. Use Integrations (or the connect/disconnect controls on that tab) to disconnect Google or Facebook from your account.

Disconnecting removes our stored OAuth connection for that provider. You can still sign in with email and password if you have set one.

4. Guest (not signed in) data

If you use the Service without an account, dashboard layout and preferences are stored in your browser (local storage and similar technologies), not on our servers. To delete that data, clear site data for https://boomfire.com in your browser settings or use a private browsing window.

5. Google account permissions

You can revoke Boomfire's access from your Google Account at any time: Google Account permissions. Revoking access stops new sign-ins through Google; it does not by itself delete data we already stored. Use section 2 or 3 above to request deletion or disconnect.

6. URL for platform verification

Platform operators may link to this page as the data deletion instructions URL: https://boomfire.com/legal/data-deletion