hostbox

community infrastructure & a safer internet

Privacy Policy

Last updated: 2026-07-27

This policy explains what data hostbox collects, how it is used, and your rights. By using our services, you accept these terms.

1. Logging

1.1 Server Logs (Nginx)

When you access our websites, Nginx logs IP address, timestamp, request URL, HTTP status code, user agent, and referrer. Logs are retained for 7 days and used for abuse detection and service operation.

1.2 XMPP (Prosody)

Username and hashed password are stored for authentication. Only error-level logs are retained. Message content, contact rosters, and connection timestamps are not logged.

File uploads: Do not upload illegal content.

1.3 Git (Forgejo)

Username, email address, SSH public keys, and repository content are stored as part of normal operation. Logs include IP addresses and accessed routes for security purposes.

File uploads: Do not upload illegal content.

2. Data We Do Not Collect

3. How Your Data Is Used

Collected data is used to provide, operate, and improve services, protect against abuse and unauthorized access, and respond to security incidents. Data is never sold, shared with third parties, or made public.

4. Data Protection

We use HTTPS for transit encryption, firewall rules, system hardening, and regular updates. No system is fully secure, and you use the services at your own risk.

5. Your Rights

You may request access to, correction of, or deletion of your personal data. To exercise these rights, contact admin@hostbox.live. We will respond within 30 days.

6. Hosting

hostbox is hosted in Sweden on dedicated servers. DNS is managed through domain registrars. SSL certificates are provisioned by Let's Encrypt.

7. Governing Law

This policy shall be governed by the laws of the Republic of Lithuania.

8. Changes

This policy may be updated. Continued use after changes constitutes acceptance of the new terms.

9. Contact

Questions or concerns: admin@hostbox.live