This page describes this website — guardbox.dev — not the GuardBox sandboxing app. For how the app itself handles files, see the Security Claims section of the project's public documentation.
No Google Analytics, Meta Pixel, or any other third-party analytics or advertising script. No third-party fonts, CDN-hosted scripts, or embedded widgets — everything this page loads is served from this domain. No advertising cookies. No cross-site tracking. There is nothing on this site for a tracker-blocker like Privacy Badger to catch, because nothing here tracks you.
We honor Global Privacy Control and Do Not Track signals as a matter of policy, not code — this site has no tracking or data-sale mechanism to switch off in the first place. There is nothing to opt out of.
Two forms on this site send data to our own backend, hosted in the EU. We collect exactly what's needed to act on your submission, nothing else:
The email address you submit, and nothing else — no IP address, no device or browser information, no timestamp beyond what's needed to send updates. Used only to notify you about the GuardBox Kickstarter campaign. Deleted on request at any time — see Contact.
Name, email, optional company, your selected role, and your message — only the fields you fill in. Used only to respond to you. Not added to any mailing list. Not shared with any third party.
Consistent with how the GuardBox app itself is built — collect the minimum, drop everything else — this site's backend does not store your IP address, user agent, or any other network-context metadata alongside form submissions. Web-server access logs (a standard part of running any server, used only to detect abuse and keep the service running) are kept for a short, fixed period and then deleted — see Retention below.
EU-hosted infrastructure, no data leaves the EU. Nothing is sold, rented, or shared with data brokers, advertisers, or analytics companies — we don't have relationships with any.
Contact-form and subscribe-form submissions are kept only as long as needed to respond or to run the Kickstarter update list, and are deleted on request. Server access logs are rotated on a short retention window and not analyzed for anything beyond abuse prevention.
Under GDPR you can request access to, correction of, or deletion of any data you've submitted through this site. Email us via the contact page and we'll act on it directly — no account or login required, because we don't keep one.