Sicherheit

Core guest privacy tools are designed to work with minimal information and can be used without creating a Burner Boxx account where the product allows it. Account-based features such as Squads, LIVE, creator tools, messaging, settings, purchases, and age-safety controls use only the information needed to operate and protect those experiences.

Payment card details are handled by Stripe. Burner Boxx receives payment and subscription information needed to grant access and manage billing, not your raw card number or CVV.

Supported network communications use HTTPS/TLS. Forwarded emails use AES-256 application-level encryption and are delivered as one-time secure links that self-destruct after viewing or 24 hours. Payment card data is handled by Stripe; Burner Boxx does not store raw card details.

Secure links use client-side encryption where the decryption key lives in the URL fragment, never sent to the server. Only the recipient can read the message.

Temporary privacy content follows its configured expiry lifecycle. Burner Boxx may retain limited operational, security, safety, billing, legal-consent, and abuse-prevention records where needed to operate the platform, investigate misuse, maintain reliability, or meet applicable obligations. See the Privacy Policy for the current retention description.

We do not describe account-based Platform 2100 activity, moderation records, payment records, or required security records as anonymous or automatically erased with a temporary privacy session.

We use behavioral analysis and rate-limiting to prevent fraud, phishing, and automated abuse while minimizing unnecessary identity collection. IP addresses may be screened against threat intelligence sources, and suspicious patterns may be blocked or routed for review.

We maintain strict acceptable-use policies and reserve the right to terminate access for users who violate them.

Temporary addresses, supported temporary-number sessions, and their associated temporary content are designed to expire according to the timer and lifecycle shown in the product. Automated cleanup removes expired temporary content according to those configured rules.

Operational, security, safety, billing, legal-consent, and abuse-prevention records are governed separately and may be retained when necessary. Expiry reduces retained temporary content but does not eliminate every security risk.

Burner Boxx uses cloud infrastructure, access controls, monitoring, and application-level safeguards appropriate to the services being operated. Security controls are reviewed as the platform evolves.

Our privacy and data-handling practices are designed with applicable privacy obligations in mind. Supported privacy requests are handled according to the current Privacy Policy and applicable legal timeframes.