Privacy Policy

1. Controller

Owner: Tomeu Bestard Puig
Email: info@chronoboxes.com
Address: Balearic Islands, Spain
Tax ID (NIF): 43161263S
Website: chronoboxes.com

2. Data processed

Text-only ChronoBoxes

In a normal box without uploaded media, the message, sender name, opening date and optional gates may be encrypted in the browser and included in the private link. ChronoBoxes does not keep a server copy of that text-only content and cannot recover it if the complete link is lost. For newly created text-only ChronoBoxes, the service may keep a small control record containing a random capsule identifier, a hashed management key, status and timestamps so the creator can revoke the shared link later; that record does not contain the message or sender text.

ChronoBoxes with uploaded media

When photos or video are added, ChronoBoxes stores the sender name, message, opening date, configured gates, uploaded media and technical capsule identifiers needed to deliver the reveal. A secret answer is stored as a hash. If location unlocking is enabled, the target coordinates are stored with the ChronoBox.

Location at opening

When a server-stored box requires location, the browser requests permission and sends the current coordinates momentarily to the server to calculate distance from the secret location; they are not added to the stored capsule record.

Optional Ko-fi support

ChronoBoxes does not process support payments on this website. If you choose the Ko-fi support link, you leave chronoboxes.com and interact with Ko-fi and its payment providers under their own terms and privacy policies. ChronoBoxes does not receive your card or payment credentials through the capsule flow.

Optional affiliate recommendations

ChronoBoxes may display clearly identified optional links to third-party gift or creative-service providers after a ChronoBox is created, while a box is waiting to open, or after a reveal. If you choose one of these links, you leave chronoboxes.com and the third party processes your visit under its own terms and privacy policy. ChronoBoxes may receive a commission if you later make a qualifying purchase, at no additional cost to you. ChronoBoxes records only aggregate first-party counts of affiliate-link impressions and clicks by placement, category and country code; capsule content and private-link identifiers are not included in those metrics.

Technical data and analytics

Hosting providers may create security logs containing IP address, date, requested resource and browser information. ChronoBoxes also keeps first-party aggregate operational metrics for page loads, successful ChronoBox creations by type and successful openings, together with estimated unique visitors/sessions and aggregate entry-source and landing-page counts. For unique estimates, request network/browser metadata is transformed in memory with a private server key into an aggregate statistical sketch; the metrics layer does not store the raw IP address, raw user agent or a persistent browser ID. Source reporting stores only a category or referring domain and landing reporting only the page path, without query strings, URL fragments or full referring URLs. Capsule IDs, message content, media, secret answers and coordinates are not included. Google Analytics is loaded only after explicit analytics consent. Analytics events do not include capsule text, uploaded photos or video, secret answers or secret-location coordinates. First-party operational metrics may also count aggregate affiliate impressions and clicks without storing capsule content, raw IP addresses or persistent browser identifiers.

3. Purposes and legal basis

ChronoBox data are processed to provide the service requested by the user. Security processing is based on the legitimate interest in protecting the platform. Optional analytics are based on consent.

4. Retention

Server-stored ChronoBoxes can be scheduled to open no more than 6 months from creation and may then remain available for up to 90 additional days. After that period, stored message and media may be deleted automatically. The creator can delete server-stored content earlier through the private management link. For text-only ChronoBoxes, the same management mechanism revokes the encrypted shared link; the message itself is not stored server-side.

5. Recipients

Data may be processed by providers strictly necessary to deliver the service, particularly web hosting. If analytics are accepted, Google processes the relevant Google Analytics data under its own legal and contractual framework. Ko-fi is only involved if a user voluntarily leaves the site to support the project. Affiliate partners are only involved if a user voluntarily follows a clearly identified external recommendation.

6. Rights

Where applicable, you may request access, rectification, erasure, objection, restriction and portability by writing to info@chronoboxes.com. Creators can also delete a server-stored box or revoke a text-only ChronoBox directly through the private management link. You may lodge a complaint with the competent data-protection authority.

7. Minors and third-party content

ChronoBoxes must not be used to collect personal data from minors without the authorization required by law. If you upload images or videos of other people, you must have a legitimate basis to do so and should avoid unnecessary sensitive content.

8. Security and private links

Server-stored share links contain an access key in the URL fragment. Anyone with the complete share link may attempt to open the box once its conditions are met. Treat the share link as private. The separate management link can delete server-stored content or revoke a text-only shared link and should not be shared with the recipient.