Privacy policy

Last updated: October 2, 2026

In short

• No account, no sign-up, no phone number.
• Your content is locked in your browser before it leaves. We cannot read it.
• Almost nothing is kept, and what is kept deletes itself.

What is kept, tool by tool

• Email: received emails, for 24 hours, then deleted. They are locked as soon as they arrive and only your browser has the key to open them.
• Secret note: the locked message, until it is first read or expires. The key is in the link; we don't have it.
• Poll: the locked question and the vote counts, until the poll ends.
• Clipboard: the locked text, for 10 minutes at most.
• Chat, call, meeting, screen sharing, file transfer: nothing. Everything goes directly between people and nothing is recorded.
• Location sharing: nothing. Your location is encrypted, relayed live for the time you choose, then sharing stops. Map images load from OpenStreetMap, which sees your IP address but never your shared location.
• File vault, passwords, photo cleaner, redactor: nothing. Everything happens on your device; your files are never uploaded.

Your name in chat, calls and meetings

The name you type is only shown to the people with you. It is kept in your browser for next time, never on our servers.

Links

• Anyone who has a link can open it. Only share it with people you trust.
• A chat, call, meeting, screen or transfer link expires after the time you choose (from 1 hour to 7 days, 24 hours by default). It holds nothing: the conversation only exists while people are connected.
• A temporary email address and its « On my phone » link are valid for 24 hours.

Ads and statistics

To stay free, BoxToss shows Google ads and counts visits with Google Analytics. These services may use cookies. In Europe, the UK and Switzerland, you can accept or refuse.

• Google only sees which page you visit (for example "/fr/note"), never the key in your links or your content.
• Ad settings: adssettings.google.com — how Google uses data.

Hosting

The site is hosted by Cloudflare, which sees technical information (like your IP address) to protect the network. For calls, Cloudflare and Google servers help devices find each other; they see your IP address but never the video, sound or messages.

Contact

contact@boxtoss.com — support: support@boxtoss.com