How we protect your data

Simple explanations of what BoxToss does to keep your content private.

Encrypted in your browser

Notes, chat messages, polls and clipboard texts are locked with AES-256 encryption on your device, before anything is sent. Our servers only ever see unreadable data.

The key stays in your link

The key is in the part of the link after « # ». Browsers never send that part to a server, so only the people you give the link to can open the content.

Nothing stored for live tools

Chat, calls, meetings, screen sharing and file transfer go directly between devices or through a relay that keeps nothing. When everyone leaves, nothing remains.

Automatic deletion

Emails disappear after 24 hours, notes after being read, clipboard texts after 10 minutes. Deleted content cannot be recovered, not even by us.

Protection against tracking and abuse

Tracking images in emails are blocked, email scripts never run, the site only works over HTTPS with strict security rules, and our services are protected against bots.

What we cannot protect

Anyone who has a link can open it, so share links only with people you trust. And for important accounts, always use your real email address.