Privacy Policy

Last updated: August 6, 2026

1. Overview

This Privacy Policy explains how Bitty Box ("we", "us") collects, uses, and protects information when you use bittybox.org, its APIs, the Box Protocol, MCP endpoints, and related services (collectively, the "Service"). By using the Service, you consent to the practices described here.

2. Information We Collect

• Content you submit: The payloads, documents, and configurations you encode into Bitty Boxes, including any metadata you provide.
• Account & contact data: Information you provide when contacting us, such as your name and email address.
• Usage & technical data: Request logs, IP addresses, user-agent strings, API usage metrics, and error reports needed to operate and secure the Service.
• Cookies & local storage: Minimal identifiers used to maintain sessions and preferences. We do not use third-party advertising or tracking cookies.

3. How We Use Information

We use collected information to: operate, host, and render Bitty Boxes; authenticate requests; enforce rate limits and security; debug and improve the Service; and respond to support requests. We do not sell your personal information.

4. Sharing of Information

We share information only: (a) with service providers who help operate the Service under confidentiality obligations; (b) when required by law or to protect rights and safety; or (c) in connection with a merger, acquisition, or asset transfer, subject to this Policy. Content you choose to make public via a shareable Box URL is, by definition, publicly accessible.

5. Public vs. Private Content

Bitty Boxes you generate and publish through a shareable URL are accessible to anyone with the link. Do not place sensitive, confidential, or personal information in publicly shared Boxes. We are not responsible for content you choose to expose.

6. Data Retention

We retain User Content and account data for as long as necessary to provide the Service or as required by law. You may request deletion of your data by contacting us. Aggregated, anonymized usage statistics may be retained indefinitely.

7. Security

We apply reasonable technical and organizational measures to protect data in transit and at rest. However, no system is perfectly secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise these rights, contact support@bittybox.org.

9. Children's Privacy

The Service is not directed to individuals under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date. Continued use after changes take effect constitutes acceptance of the revised Policy.

11. Contact

Questions or requests regarding privacy may be directed to support@bittybox.org.