PixelBox terms & privacy

Last updated 29 September 2026

1. What PixelBox is

PixelBox (box.pixel8.ro) is a free tool, operated by Pixel8 S.R.L. (referred to in these terms as “PIXEL8”), for passing a password or short secret to someone without leaving it in email or chat. There are no accounts. You can send in two ways:

• Sealed note: encrypted in your browser. The note travels inside the link itself, and our server never receives it or its key.
• Quick link: encrypted on our server, opened with one link, and deleted after its last allowed view or when it expires (at most 7 days), whichever comes first.

Only the PixelBeam feature (box.pixel8.ro/beam) sends files (with no size limit on the same network, or up to 1 GB each across networks) and text directly between two devices. Our servers only introduce the devices to each other; the content itself is end-to-end encrypted.

2. Acceptable use

By using PixelBox you agree not to use it to store, send or share anything unlawful. That includes:

• content that infringes someone’s rights
• malware
• phishing or fraud
• material that sexually exploits children
• anything that facilitates crime

Don’t attempt to disrupt the service, get around its limits, or probe it for vulnerabilities without permission. We may limit or block use that breaks these rules, and we may remove any Quick link reported to us as illegal.

3. Reporting illegal content

If you believe a PixelBox link holds illegal content, tell us using the report form. Include the full link, why you believe it’s illegal, and your name and email address, unless the report concerns child sexual abuse material, which you can report anonymously. We confirm receipt, review each report promptly and carefully, and tell you what we decided. This form is also our point of contact under the EU Digital Services Act, for authorities and for users. We handle reports in English and Romanian.

Because of how PixelBox works, we cannot read sealed notes. We can, however, delete a reported Quick link.

4. How your data is handled

• Quick links: the secret is encrypted with AES-256-GCM and stored on our server in the EU. It is deleted after the last allowed view, when revoked, or at expiry. We keep a small record for 30 days after that (the link’s id, times, view count and status), then delete it too.
• Access codes: an optional 6-digit code. We store only a keyed, one-way hash of it. Five wrong tries destroys the link.
• Sealed notes and PixelBeam transfers: encrypted end to end. Their contents never reach our servers.

5. Privacy

• Controller: PIXEL8, contactable through the contact form.
• What we process: the encrypted Quick links described above, and a keyed, one-way hash of your IP address. We use the hash only to limit how many links one address can create each day, and delete it after two days. Like any website, our hosting provider’s web server also logs technical request data (IP address, time, page, browser) for security, and keeps it for a limited period.
• Usage counts: to see whether PixelBox and PixelBeam are used, and how much PixelBeam traffic goes through Cloudflare, our own server keeps daily totals only: page views (and whether on a phone or a computer), how many Quick links and sealed notes are created and opened, and for PixelBeam whether devices found each other or paired, and each completed transfer: text or files, how many files, their total size, and whether it went directly or through the relay. Never contents, file names, device names, links or secrets. We also count video plays and Ko-fi clicks, and the country a visit comes from: it is looked up from your IP address in memory, and the address is then discarded. No cookies, identifiers or browser storage are involved, so nothing can be linked to you or to another visit. If your browser sends a Global Privacy Control or Do Not Track signal, nothing is counted.
• What we don’t do: there are no accounts, no advertising, no tracking and no profiles: usage is only counted as the anonymous daily totals above. We use no third-party scripts, fonts or embeds, except that PixelBeam connects your browser to Cloudflare’s servers to introduce devices to each other and relay encrypted data when a direct connection isn’t possible.
• Legal basis: providing the service you ask for, and our legitimate interest in keeping it secure and free of abuse, and in knowing in aggregate how it is used (GDPR Art. 6(1)(b) and (f)).
• Where: PixelBox is hosted in the EU. Cloudflare may process connection data globally under the EU Standard Contractual Clauses.
• Your rights: you can ask for access to, correction of or deletion of your data, and object to its processing, through the contact form. You can also complain to your local EU/EEA data protection authority (in Romania, the ANSPDCP).

6. Cookies & browser storage

PixelBox sets no cookies. It stores three things in your browser’s local storage:

• your light or dark theme
• a random key that lets this browser list and revoke the Quick links it made
• that you’ve closed the short privacy notice: for the visit (“Got it”) or for good (“Don’t show again”)

PixelBeam also remembers the devices you pair with. All of this is strictly necessary for features you use, is never used for tracking, and is cleared when you clear this site’s data. The usage counts don’t store or read anything on your device, which is why no consent banner is needed.

7. No warranty

PixelBox is provided “as is”, free of charge, without warranties of any kind, and may change or stop at any time. To the fullest extent the law allows, PIXEL8 is not liable for any loss arising from its use, including lost or undelivered secrets or files. Nothing here limits liability that cannot be limited by law.

8. Provider & governing law

PixelBox is provided by PIXEL8. These terms are governed by applicable European Union law, including the GDPR and the Digital Services Act, and by the national law of the EU Member State where PIXEL8 is established. This is without prejudice to the mandatory protections of the law where you live. We may update these terms, and the date at the top shows the latest version.