MyBox

Legal

Privacy Policy

How MyBox handles your information, in plain language.

Effective October 20, 2026 6 min read Applies to mybox.id

In short

Your box, your choice

Most apps work without an account. Sign in only when you want to sync across devices.

No ads, no selling

We do not sell personal data or use it to build advertising profiles.

Third parties, clearly

Hosting, sign-in, analytics, and media providers each do a specific job for MyBox.

Overview

This Privacy Policy explains how MyBox ("MyBox", "we", "us") handles personal information when you use mybox.id and its features. It covers the website, the optional account, and the APIs that support them.

MyBox is a personal digital box. You can use most of it without signing in. If you choose to sign in, we store the content you ask us to sync so it is available on your other devices.

Questions about this policy? Email info@mybox.id or use our contact page.

Information we collect

Account information

When you sign in with Google, GitHub, LinkedIn, X, or Discord, that provider shares basic profile information with us, such as your name, email address, profile photo, provider account ID, and any username you choose for MyBox. We do not receive or store your password for that provider.

Content you save

We process the content you create or save, including notes, tasks, bookmarks, favorite radio stations and countries, saved TV and IPTV channels, app preferences, and the optional birth date used by the biorhythm app. Some of this stays in your browser. If you are signed in, the content that is designed to sync may be stored on our servers.

Technical information

Our hosting and API infrastructure may process technical data such as your IP address, browser and device information, requested pages, timestamps, and error logs. On our production site, we use Google Analytics 4 to understand aggregate usage. Google Analytics may collect device information, approximate location, pages viewed, referral sources, and interaction events. We do not send your name or email address as analytics event parameters.

Session information

We keep session records so you can see and revoke signed-in devices in Settings. These records may include a device identifier, browser user agent, creation time, last-seen time, and expiry time.

How we use information

We use information to:

  • provide, operate, and secure MyBox;
  • sign you in and sync the content you choose to save;
  • remember preferences and improve the experience;
  • understand which features are useful and fix problems;
  • respond to questions, reports, and support requests; and
  • comply with legal obligations and protect the rights and safety of users.

We do not sell personal information or use it for third-party behavioral advertising. MyBox does not show ads.

Cookies and local storage

We use a small number of essential cookies to keep you signed in and to remember basic preferences. Our authentication cookies include _b_uid, _b_did, and _b_ust. The _b_crt cookie remembers the last page you visited for up to one year.

On production, Google Analytics may set cookies such as _ga and _ga_*. We also use browser local storage for things like your theme, widget layout, volume, last station, local favorites, Quran reading position, and biorhythm settings. This local data stays in your browser unless a feature is designed to sync it to your account.

You can clear or block cookies and local storage through your browser. Blocking essential cookies may prevent sign-in and syncing from working. You can also use browser settings or a content blocker to limit analytics.

When we share information

We share information only when it is needed to run MyBox:

  • Hosting and infrastructure. Our frontend is hosted on Vercel, and our API and database run on Contabo infrastructure.
  • Sign-in and analytics. Google provides sign-in, analytics, and YouTube embeds. If you choose another sign-in provider, that provider processes your authentication.
  • Media and data providers. Radio, IPTV, news, weather, and other external content may be loaded from third parties. Your browser may contact those providers directly, and they may receive technical information such as your IP address.
  • Legal and safety. We may disclose information if required by law or if we believe it is necessary to protect rights, safety, or the integrity of the service.
  • Business changes. If MyBox is merged, acquired, or reorganized, information may be transferred as part of that transaction, subject to this policy.

We do not sell personal information.

Third-party content

MyBox brings together content from third parties, including YouTube videos, radio streams, IPTV channels, news feeds, weather data, and other external links. We do not control how those providers collect or use information. Their own privacy policies apply when you interact with their content.

Retention

We keep account information and synced content while your account is active. If you ask us to delete your account, we will delete or anonymize the associated personal data within a reasonable period, except where we need to keep limited records for legal, security, or backup purposes.

Server and security logs are kept only as long as needed for operations and troubleshooting. Analytics retention follows our Google Analytics settings. Local data remains in your browser until you clear it.

Security

We use HTTPS, access controls, and other reasonable measures to protect information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Use a strong password with your sign-in provider and revoke any session you do not recognize in Settings.

Your choices and rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to the processing of your personal information, to request portability, to withdraw consent, or to complain to a supervisory authority. To make a request, email info@mybox.id. We may ask you to verify that you control the account before acting on a request.

You can also:

  • update your profile and username in Settings;
  • review and revoke active sessions in Settings;
  • delete individual notes, tasks, bookmarks, and favorites in the app;
  • clear local data through your browser; and
  • limit analytics with browser settings or a content blocker.

We do not currently offer a self-service account deletion button. To delete your account and synced content, email info@mybox.id. We will respond within a reasonable time and as required by applicable law.

Children

MyBox is not directed to children under 13. If the law where you live requires a higher age for digital consent, use MyBox only with permission from a parent or guardian. If we learn that we collected personal information from a child without the required consent, we will delete it.

International processing

Our service providers may process information in countries other than Indonesia, including through global hosting and analytics networks. Where required, we use appropriate safeguards for those transfers. By using MyBox, you understand that information may be processed outside your country.

Changes to this policy

We may update this policy as MyBox changes. When we do, we will post the new version with a revised effective date. If a change is material, we will provide a clearer notice on the site or by email where appropriate. Continued use of MyBox after the effective date means you accept the updated policy.

Contact

MyBox is operated by Sony AK and MyBox Platforms, Inc. For privacy questions or requests, email info@mybox.id or use the contact page.

Questions? Email info@mybox.id or use the contact form. Terms of Service The rules that apply when you use MyBox.