Privacy Policy
Last updated: September 6, 2026.
1. Controller
Owner: Tomeu Bestard Puig
Email: info@chronoboxes.com
Address: Balearic Islands, Spain
Tax ID (NIF): 43161263S
Website: chronoboxes.com
2. Data processed
Text-only ChronoBoxes
In a normal box without uploaded media, the message, sender name, opening date and optional gates may be encrypted in the browser and included in the private link. ChronoBoxes does not need to keep a server copy of that text-only content and cannot recover it if the complete link is lost.
ChronoBoxes with uploaded media
When photos or video are added, ChronoBoxes stores the sender name, message, opening date, configured gates, uploaded media and technical capsule identifiers needed to deliver the reveal. A secret answer is stored as a hash. If location unlocking is enabled, the target coordinates are stored with the ChronoBox.
Location at opening
When a server-stored box requires location, the browser requests permission and sends the current coordinates momentarily to the server to calculate distance from the secret location; they are not added to the stored capsule record.
Optional Ko-fi support
ChronoBoxes does not process support payments on this website. If you choose the Ko-fi support link, you leave chronoboxes.com and interact with Ko-fi and its payment providers under their own terms and privacy policies. ChronoBoxes does not receive your card or payment credentials through the capsule flow.
Technical data and analytics
Hosting providers may create security logs containing IP address, date, requested resource and browser information. ChronoBoxes also keeps first-party aggregate operational metrics for page loads, successful ChronoBox creations by type and successful openings, together with estimated unique visitors/sessions and aggregate entry-source and landing-page counts. For unique estimates, request network/browser metadata is transformed in memory with a private server key into an aggregate statistical sketch; the metrics layer does not store the raw IP address, raw user agent or a persistent browser ID. Source reporting stores only a category or referring domain and landing reporting only the page path, without query strings, URL fragments or full referring URLs. Capsule IDs, message content, media, secret answers and coordinates are not included. Google Analytics is loaded only after explicit analytics consent. Analytics events do not include capsule text, uploaded photos or video, secret answers or secret-location coordinates.
3. Purposes and legal basis
ChronoBox data are processed to provide the service requested by the user. Security processing is based on the legitimate interest in protecting the platform. Optional analytics are based on consent.
4. Retention
Server-stored ChronoBoxes can be scheduled to open no more than 6 months from creation and may then remain available for up to 90 additional days. After that period, stored message and media may be deleted automatically. The creator can delete server-stored content earlier through the private management link.
5. Recipients
Data may be processed by providers strictly necessary to deliver the service, particularly web hosting. If analytics are accepted, Google processes the relevant Google Analytics data under its own legal and contractual framework. Ko-fi is only involved if a user voluntarily leaves the site to support the project.
6. Rights
Where applicable, you may request access, rectification, erasure, objection, restriction and portability by writing to info@chronoboxes.com. Creators can also delete a server-stored box directly through the private management link. You may lodge a complaint with the competent data-protection authority.
7. Minors and third-party content
ChronoBoxes must not be used to collect personal data from minors without the authorization required by law. If you upload images or videos of other people, you must have a legitimate basis to do so and should avoid unnecessary sensitive content.
8. Security and private links
Server-stored share links contain an access key in the URL fragment. Anyone with the complete share link may attempt to open the box once its conditions are met. Treat the share link as private. The separate management link can delete the content and should not be shared with the recipient.