Privacy policy
Draft. The owner fills the red fields and has it reviewed before launch.
Controller: owner: legal entity, address, owner: contact email. The website serves its own static assets and sets no analytics, advertising or tracking cookies. Sign-in uses the necessary cookies described below. The home, pricing, docs and journal pages load one outside script, Cloudflare Web Analytics, described below. The sign-in, account, legal and error pages don't load it.
What we process, and why
| Data | Why | Kept |
|---|---|---|
| Project ownership; email and provider identity when provider sign-in is enabled. Mobilebox has no password-login flow. | your account and log-in (contract) | owner: account-data retention and deletion policy |
| Dashboard-issued API-key hashes, names, display hints and creation times. Team-issued beta credentials are held in owner-only server configuration. | authenticating API and MCP calls (contract) | Active until revoked; owner: backup retention |
| Balance, sessions, billed seconds | billing and your usage overview (contract, tax law) | owner: retention period for billing records |
| Sandbox storage: installed apps, saved app data and logins | running the phone you asked for (contract) | until you delete the phone; parked phones keep their data |
| Screen observations and screenshots returned to API/MCP callers | reading and controlling the phone (contract) | Generated for the response, not automatically stored by the service. Saved recordings and caller-created artifacts have separate retention. |
| Operational diagnostics: startup, recovery and error summaries. Authentication handlers do not log credentials. | security and fixing faults (legitimate interest) | owner: log retention |
| Page views on the home, pricing, docs and journal pages. Cloudflare Web Analytics sends the page address and the referring page, both without query string or fragment, plus page-load timings and the page elements they were measured on. Like every web request, its requests give Cloudflare your IP address and browser user agent. It sets no cookies and uses no browser storage. Ad blockers may block it. | counting visits and the sites that refer them, to decide what to write and fix (legitimate interest) owner: confirm legal basis | We see aggregate counts only, in Cloudflare's dashboard. owner: confirm Cloudflare's retention |
| Necessary sign-in cookies and server-side session hashes | keeping you logged in (strictly necessary) | Session access expires after seven days; logout revokes it. Temporary provider sign-in flows expire after ten minutes. owner: expired-record and backup retention |
Treat a phone like any computer you rent: don't put data on it that you aren't allowed to process there. We don't look into phones except to fix a fault you report or when the law requires it.
Where it runs, and who helps
- Hetzner Online GmbH: the existing server hosts the website, API, phones and local SQLite account, key, session and billing records. owner: confirm hosting region and data processing agreement
- GitHub or Google, when enabled: handles provider sign-in and returns verified identity information. Mobilebox does not receive your provider password, and does not store provider access tokens.
- Cloudflare, Inc.: provides the Web Analytics described above, on the home, pricing, docs and journal pages. owner: confirm data processing agreement and transfer basis
- Let's Encrypt: issues the site's TLS certificate.
Phones reach the internet from our server, or through the proxy you set. The apps you install talk to their own servers under their own privacy policies.
Your rights
You can ask for a copy of your data, its correction or deletion, restriction, portability, and object to processing based on legitimate interest: email owner: contact email. You may also complain to a data protection authority, e.g. owner: competent authority.
Last updated: owner: date