1. What we collect
We collect only what we need to operate the Service:
| Category | Examples |
|---|---|
| Account information | Email address, display name, profile image, and plan tier (collected when you create or sign in to an account). |
| Session metadata | Session identifier, input type (link or file), input name, timestamps, status, and session duration. This is descriptive metadata only — not the content opened inside the sandbox. |
| Payment information | Subscription and customer identifiers and billing status, held through our payment processor. We do not store full card numbers. |
| Abuse-prevention data | IP address and basic request data, used to enforce usage limits and protect against abuse. |
2. What we don't collect or keep
- Browsing history, cookies, or page content generated inside a sandbox;
- Files you submit to a sandbox — they exist only within the temporary environment and are destroyed with it;
- Screenshots beyond what is needed during an active session;
- Data from third-party advertising, behavioral analytics, or cross-site tracking tools — we do not install them.
3. How we use information
- To provide, maintain, and improve the Service;
- To create and manage your account and authenticate sign-in;
- To process payments and manage subscriptions;
- To enforce usage limits and detect, prevent, and respond to abuse, fraud, and security issues;
- To provide support and respond to your requests;
- To comply with legal obligations.
We do not sell your personal information, and we do not use it for behavioral advertising.
4. Legal bases (EEA/UK)
Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract (to provide the Service and process payments), legitimate interests (to secure the Service and prevent abuse, balanced against your rights), consent (where specifically requested), and legal obligation (to meet our compliance duties).
5. Cookies
We use a small number of strictly necessary cookies and similar technologies to keep you signed in, secure the Service, and remember basic preferences. We do not use advertising or third-party tracking cookies. You can control cookies through your browser, though disabling essential cookies may affect functionality.
6. Sharing & service providers
We do not sell your data. We share limited information with trusted service providers who help us run the Service, strictly on our instructions and under appropriate data-protection terms. These providers support functions such as hosting and infrastructure, authentication and data storage, temporary sandbox provisioning, payment processing, and support communications. We engage these providers only to the extent necessary to operate the Service, and we require them to safeguard your information.
We may also disclose information where required by law, to enforce our terms, or to protect the rights, safety, and security of our users, the public, or the Service.
7. Retention
- Sandbox data is destroyed when the session ends.
- Session metadata is retained for signed-in users for a limited window that depends on your plan, after which it is deleted or anonymized.
- Account and billing records are kept while your account is active and for as long as needed to meet legal, accounting, and tax obligations.
- Abuse-prevention data is kept only as long as necessary to serve its purpose.
8. International transfers
Our providers may process data in countries outside your own, including outside the EEA. Where we transfer personal data internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an equivalent recognized mechanism.
9. Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal data; to object to or restrict certain processing; and to withdraw consent. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data-protection authority.
To exercise any of these rights, contact us at support@tempbrowser.app. We will respond within the time required by applicable law.
10. Security
We use technical and organizational measures designed to protect personal data, including isolation of sandbox environments from your own device, encryption in transit, access controls, and automatic destruction of session environments. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
11. Children
The Service is not directed to children under 16 (or the applicable age of digital consent), and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will take appropriate steps to delete it.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, provide additional notice.
13. Contact
For privacy questions or requests, contact us at support@tempbrowser.app.