Privacy policy
Last updated October 31, 2026
This policy explains what CoolBox keeps about you, why, and for how long.
What we keep
- Your email address, to send sign-in links and messages about your account.
- Account details: your role, when the account was made, when you last signed in, when your plan or trial ends, and whether you have had one before.
- Sign-in requests: the email address and internet (IP) address of each request for a sign-in link, to stop abuse. These are deleted within an hour.
- Access codes you redeem, and when.
- Purchases, once plans are on sale: which plan and when, and the payment provider's reference. We never see or keep your card details.
What we do not keep
Your designs stay in your browser and in the project files you save on your own computer. CoolBox has no advertising, no analytics and no tracking cookies.
Cookies
CoolBox sets one cookie, which keeps you signed in. It is needed for the site to work and expires after a day.
Who else handles it
We do not sell your information. These services handle it for us, only to run CoolBox:
- Railway, which hosts CoolBox and its database.
- Resend, which sends our emails.
- Cloudflare, which runs our domain name.
- Our payment provider, once plans are on sale, which handles payments and sales tax.
How long we keep it
- Your account, until you delete it.
- Server logs, for 30 days. Email and internet addresses in them are shortened, such as l***@example.com and 203.0.113.x.
- Backup copies of the database, for up to 90 days. A deleted account stays in older copies until they are removed.
- If your account ever had a plan or trial, a one-way scrambled form (a hash) of your email address is kept after you delete the account, so the same address cannot redeem another trial. It cannot be turned back into your address.
Your choices
You can delete your account at any time from the menu in the designer: choose Delete my account. To ask for a copy of what we keep about you, or to correct it, email [email protected].
Children
CoolBox is not meant for children under 13, and they must not make an account.
Changes
When this policy changes, the date at the top changes.
Contact
For any question about your information, email [email protected].