Privacy Policy

1. Who we are

Boredlisted (boredlisted.com) is an independent publication written and run by its founder, Denjie Garcia, in Manila, Philippines. In this policy, “we” and “us” mean Boredlisted, which decides how the personal information described here is used (the “controller” or “personal information controller”).

For anything about your privacy, email info@boredlisted.com.

2. What we collect and why

When you read the site

Our own visitor statistics. A small script on each page tells our server which page you opened, the page or site that sent you (the referrer) and any campaign tags in the link, your browser’s time zone, your device type (phone, tablet or desktop), how long the page was actively open and how far you scrolled. We use this to see which articles are useful and what to write next.

• Your IP address is used for a moment to look up an approximate country, region and city, using a location database stored on our own server (IP geolocation by DB-IP). The IP address itself is not stored.
• To count unique readers, we store a code made from your IP address, your browser’s identification string and a secret that changes every day. It can’t be turned back into your IP address and can’t link your visits across days.
• A random ID kept in your browser tab (session storage, not a cookie) groups the pages you view in one visit. It disappears when you close the tab.
• Automated browsers and the site owner’s own visits are not counted.

Google Analytics. We also use Google Analytics 4, which sets cookies and collects information about your visit (such as pages viewed, approximate location, device and browser) so we can understand traffic. Google processes it under its own terms; see how Google uses information from sites that use its services. You can block it with the Google Analytics opt-out add-on.

Advertising. Boredlisted is free because of ads. Google AdSense shows ads across the site, and MGID shows recommended content and ads on some pages (such as the home page and topic pages). These companies and their partners may use cookies and similar technologies to show ads, limit how often you see them, measure results and, unless you opt out, personalize them based on your visits here and to other sites. See your choices for opt-outs, and MGID’s privacy policy.

Server logs. Like every website, our hosting provider’s servers automatically record requests (IP address, date and time, the page requested, browser identification) for security and to keep the site running. These logs are kept by the host for a limited period.

Embedded content. Some articles include videos or posts from other sites (for example YouTube, X/Twitter, TikTok or Instagram). When you view them, that site can collect information about you, just as if you visited it directly.

When you join the newsletter or get a free download

Signing up through one of our forms is optional. When you sign up, we store:

• Your email address and, if you give it, your first name.
• A record of your consent: the exact wording shown next to the button, the date and time, the page and form you used, which free download you asked for, your IP address and your browser identification. We keep this to show that you agreed, and to block abuse.
• Your approximate location: city, region (state or province), country, approximate coordinates and time zone, looked up from your IP address in the location database on our server. The lookup happens on our own server; your address isn’t sent to a third party to do it. IP locations can be wrong, so this is an estimate.
• Activity: when you download a file, unsubscribe, or sign up again, and any labels (tags) we add, such as which city edition you’re in.

We use this to deliver your free download, send you the Boredlisted newsletter, send local editions to readers in particular cities (for example Chicago or Vancouver), and send them at a sensible local time.

To protect the form from bots, it includes a hidden field and a timing check, and we count recent signups per connection. That count is stored for about an hour under a scrambled code, not your IP address.

Sometimes we add people by hand, or move a list over from another email platform, when they have already agreed to hear from us (for example at an event, or through a signup form elsewhere). We record how they agreed. Those records have no IP address, and any location comes from what they told us.

Sending. We will send newsletters through an email delivery provider (we plan to use Amazon Simple Email Service), which receives your address only to deliver messages and to tell us about delivery problems such as bounces and spam complaints. Our emails don’t track whether you open them or click links. If that ever changes, we’ll update this policy first.

When you use a free tool

• AI Resume Checker: your PDF and the job description are sent to Google’s Gemini AI to generate the report. The PDF itself is never saved. The report (which can quote lines from your resume) is saved with your IP address so it gets a private, hard-to-guess link you can share.
• AI Tarot Reading: the name, form of address and photo of your cards that you provide are sent to OpenAI’s AI to write the reading. The photo and reading are saved with your IP address under a private, hard-to-guess link.
• Cinematic Prompt Generator: the photos you upload are sent to Google’s Gemini AI and are not saved. Your IP address is kept briefly to apply an hourly usage limit.
• SEO Page Audit: our server fetches the public web page you enter so your browser can analyze it. We don’t keep what you enter.
• Email Extractor and Email Remover: the text you paste is processed in your browser. If JavaScript is off, it is processed once on our server and not saved.

Google and OpenAI process what is sent to them under their API terms and may keep it for a limited time, for example to detect abuse. Please don’t upload documents or photos containing information you don’t want processed this way.

When you email us

If you write to us, we keep your message and address to reply and keep a record of the conversation.

3. Cookies and similar technologies

Your browser lets you block or delete cookies. Blocking our session cookie means the newsletter form may ask you to try again.

4. Legal bases

Where the law asks for a reason to use personal information (for example the Philippine Data Privacy Act of 2012, the EU and UK GDPR, or Canada’s anti-spam law), ours are:

• Consent: the newsletter and the location-based editions, and personalized advertising where consent is required. You can withdraw consent at any time; that doesn’t affect what happened before.
• Providing what you asked for: running a free tool you chose to use, or sending the download you requested.
• Legitimate interests: understanding how the site is used, keeping it secure, preventing abuse, funding it with advertising, and keeping proof of consent. We weigh these against your interests and keep the data to a minimum.
• Legal obligations: where we must keep or disclose information by law.

5. Who we share it with

We don’t sell your email address or our subscriber list. We share personal information only with:

• Service providers that run parts of the site for us: our web host (Namecheap), Google (Analytics, AdSense, Gemini AI), OpenAI (the tarot reader), MGID (content recommendations and ads), and, once newsletters are sent, our email delivery provider (planned: Amazon Web Services).
• Authorities or others when the law requires it, or to protect the rights, safety and security of our readers, the site or others.
• A future owner if Boredlisted is ever sold or merged, under the same protections described here.

Some privacy laws (such as California’s) treat letting ad partners use cookies for personalized advertising as “sharing.” You can turn that off with the ad choices in section 8.

6. Where your data is processed

Boredlisted is run from the Philippines. Our hosting servers and the providers above are located in, or may process data in, other countries, including the United States. Where the law requires it, we rely on the provider’s contractual protections (such as standard contractual clauses) for these transfers.

7. How long we keep it

• Newsletter subscribers: for as long as you stay subscribed. If you unsubscribe, we keep your address and the unsubscribe record so we never email you by mistake (for example after importing a list), unless you ask us to delete everything.
• Consent records: as long as we keep your subscription, plus the time we might need them to show that you agreed.
• Our visitor statistics: kept for reporting. They contain no IP addresses or names.
• Saved resume reports and tarot readings: kept so their links keep working, until you ask us to delete them.
• Usage-limit records: about an hour.
• Emails you send us: as long as needed to handle your request.

8. Your choices and rights

Choices anyone can use

• Unsubscribe: use the unsubscribe link in any newsletter (one click; it takes effect immediately), or email us.
• Personalized ads: manage or turn off ad personalization in Google’s My Ad Center, and opt out of other participating companies at aboutads.info (US), youradchoices.ca (Canada) or youronlinechoices.eu (Europe).
• Analytics: install the Google Analytics opt-out add-on, or block cookies in your browser.

Your rights over your information

Depending on where you live, you can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct it (for example a wrong city);
• delete it;
• stop or limit certain uses, or object to them; and
• withdraw your consent.

Email info@boredlisted.com from the address concerned (or tell us the link of a saved report or reading). We’ll answer within 30 days and may ask you to confirm it’s you. We won’t treat you differently for using these rights.

You can also complain to a data protection authority: in the Philippines, the National Privacy Commission; elsewhere, the authority where you live (for example the Office of the Privacy Commissioner of Canada or your EU or UK regulator). We’d appreciate the chance to fix things first.

9. Security

The site uses HTTPS. Subscriber data is kept in a database that isn’t reachable from the web, admin pages require a password, free downloads are delivered through signed links that expire, and unsubscribe links use long random codes. No system is perfectly secure, but if a breach affecting your information ever happens, we’ll notify you and the authorities as the law requires.

10. Children

Boredlisted is written for adults and isn’t directed to children. Please don’t sign up for the newsletter or use the tools if you’re under 16. If you believe a child has given us personal information, email us and we’ll delete it.

11. Changes to this policy

When we change how we handle personal information, we update this page and the date at the top. If a change is significant, for example tracking newsletter opens, we’ll also tell subscribers by email before it takes effect.

12. Contact us