██████ ██████ ██ ██ ██ █████ ██████ ██ ██
██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██
██████ ██████ ██ ██ ██ ███████ ██ ████
██ ██ ██ ██ ██ ██ ██ ██ ██ ██
██ ██ ██ ██ ████ ██ ██ ██████ ██
Last updated: January 2026
1. Overview
shellbox.dev collects minimal data. We don't require names or email addresses.
2. Data We Collect
- SSH key fingerprint hash: Identifies your account. We store a SHA-256 hash, not the full key.
- IP addresses: Logged for security. Retained 30 days.
- Usage data: Box events and billing records. Retained 1 year.
- Box contents: Your files. Deleted when the box is deleted.
3. Data We Don't Collect
- Names or email addresses
- Payment card details (handled by payment processors)
- SSH session contents
- HTTP traffic through your box URLs
- Cookies (this site uses none)
4. Data Location
All data stored in the EU (Hetzner, Finland).
5. Data Sharing
We don't sell or share data except:
- When required by law
- With payment processors for transactions
- With infrastructure providers per their DPA
6. Security
- All connections encrypted (SSH/HTTPS)
- Encrypted disk storage
- Isolated Firecracker microVMs
- No shared kernels between boxes
7. Your Rights (GDPR)
EU users can request access, rectification, erasure, or portability of their data. Delete boxes with ssh shellbox.dev delete <name>.
8. Data Retention
- Account data: While active
- Box contents: Deleted within 24 hours of box deletion
- IP logs: 30 days
- Billing records: 1 year
9. Account Deletion
Delete all boxes, request refunds, stop using the Service. Records purged after 90 days of inactivity with zero balance.
10. Contact
Privacy inquiries: [email protected]