Scope and contact
This notice covers boxox.dev, its downloads and documentation, and messages you send to the project maintainer. Contact hello@boxox.dev for privacy questions or requests.
Visits to this website
The public site is served through Cloudflare. Requests can include your IP address, browser and device information, requested URL, time, and technical information needed to serve and secure the website. Cloudflare processes request data to deliver its services; infrastructure metrics and logs may be available to the site operator.
The website does not sell subscriptions, accept payments, or create shared hosted-mail accounts. We do not use advertising pixels or a marketing mailing-list form. Optional website analytics is described below.
Optional website analytics
With your permission, Google Analytics measures visits to public pages, clicks on named download files, and successful copies of the agent installation link. It receives technical request information such as IP address and browser information, public page paths, referring-site origins, simple campaign tags, and the selected file or action. Google processes this data to provide analytics.
The Google tag is not loaded before you allow analytics. Declining keeps it off. Analytics does not receive contact form fields, email addresses entered in forms, mailbox content, API keys, or arbitrary URL queries and fragments from our tracking code. Advertising storage, Google Signals, and ad personalization are disabled. Enhanced measurement is off; file clicks and agent-link copies are sent explicitly.
We store your analytics choice in local browser storage for up to 180 days. If allowed, Google Analytics uses first-party cookies with a configured lifetime of up to 180 days. The property uses two-month event-data retention. Aggregated reports can be kept longer. Browser controls, deletion, or blocking can shorten storage.
Use to change your choice. Withdrawal stops future measurement and clears the site’s Google Analytics cookies; it does not automatically delete data already collected. We honor a detected Global Privacy Control signal by keeping optional analytics off. Contact us for applicable access or deletion requests. See Google’s privacy policy and Google Analytics data collection information.
Contact messages
The contact form sends your name (if supplied), reply email, topic, and message through our Box Ox installation on Cloudflare to hello@boxox.dev. We use these details to handle your request and reply. We also use request metadata, including IP addresses, to limit abuse. Do not submit credentials or private mailbox contents.
Your self-hosted installation
When you install Box Ox in your own Cloudflare account, your installation’s mail and metadata are stored in that account. The public Box Ox website is not a shared backend for those mailboxes, and installing the software does not grant the project maintainer access to your account or mail.
The installation operator controls identities, permissions, mail domains, retention, and optional processing. That operator is responsible for notices and data-protection obligations applicable to their use. Contact the relevant installation operator about mail they process.
AI and other optional services
AI is off until the installation owner enables it. Selected mail content is sent to a configured external provider when that provider is enabled. Reputation lookups and optional open/click tracking have separate data flows. Review the processing guide and the providers’ current terms before enabling them.
Sharing and service providers
Cloudflare supplies the website infrastructure and the maintainer’s Box Ox mail infrastructure. A recipient’s email provider also handles contact correspondence. Information may be disclosed when needed to comply with law, respond to a valid legal request, protect security or rights, or provide services you request. We do not sell contact messages or use them for targeted advertising.
Retention and security
Technical data is retained according to the configured services and operational needs. Contact correspondence is retained while needed for its purpose, follow-up, security, or legal obligations, and reviewed when a deletion request is received. There is no fixed public retention period promised here. No method of storage or transmission is perfectly secure.
Your choices and rights
Where applicable law gives you access, correction, deletion, objection, portability, or other rights, contact hello@boxox.dev. We may need to verify the request and may retain information when permitted or required by law. You may also have a right to complain to your local data-protection authority. For a self-hosted installation, direct requests to its operator.
International processing and updates
Cloudflare and email services can process data outside your country. This site does not promise storage or processing exclusively in the United States or another location. We may update this notice as the site changes; the effective date will be updated for material changes.