🔒Privacy Protection
Last updated
Last updated
In the digital age, privacy protection has become one of the top concerns for users. TimeBox is acutely aware of this and places user privacy at the core of its service. As a platform that allows users to store both private and public data on the blockchain, TimeBox ensures the security and confidentiality of user data through a series of innovative technological measures.
TimeBox employs advanced AES-256 encryption technology to protect user data. This encryption standard is internationally recognized for its security, effectively preventing unauthorized access. In TimeBox, each piece of user data and file is encrypted before being uploaded to the blockchain.
Key Management
The generation and management of encryption keys are also crucial in the TimeBox system. Keys are randomly generated and, after the data is encrypted, automatically stored on the Lit network. To further enhance security, these keys are shredded and dispersed across the network, ensuring that even if the server is compromised, the user's keys remain secure.
Decentralized Storage
TimeBox fully leverages the decentralized nature of blockchain technology. Storing user data on the blockchain means there is no single point of failure or control center, significantly reducing the risk of data tampering or leaks.
User Control Rights
In TimeBox, users have complete control over their private TimeBoxes. This means that only the owner of a private TimeBox can access and decrypt the data within it. This design ensures that private data in private TimeBoxes is well protected against unauthorized access. On the other hand, public TimeBoxes are open to everyone, and anyone can access their content. Therefore, we specifically caution users not to store any sensitive or private information when opting to create a public TimeBox.
To further enhance user privacy protection, TimeBox plans to launch a fully decentralized TimeBox viewer—TimeBox Peek. This will enable users to access and view their data more securely, maintaining the confidentiality and integrity of the data.
Data Security
To enhance the user experience, TimeBox caches your signature in the browser. If you are using TimeBox on a public or shared computer, please remember to log out after use.
To log out, click on the user icon in the top right corner and select the "Log Out" option from the menu.
The log-out function will clear all data associated with your account.
Centralized Server Data Privacy Protection
Achieving a balance between providing an excellent user experience and protecting data privacy is not an easy task. With the efforts of our team, we have found a balance point. Here are some details:
Files uploaded to the centralized server are data already encrypted by the user.
The centralized server will not cache any unencrypted private data of users.
At no time will the centralized server cache the user's encryption keys.
Which data will be cached?
TimeBox Basic Attributes: Label, creation time, unlock time, Txid, owner, etc.
Public TimeBox: Content of the publicly accessible TimeBoxes will be cached during the first access after they are unlocked. This approach is to optimize the browsing experience on BoxHub, a place for displaying public boxes.
Portions of user-encrypted data to enhance download speeds.
In summary, TimeBox is committed to providing a secure, reliable, and privacy-respecting blockchain data storage solution. We believe that through these measures, users can confidently store their precious data and memories on TimeBox without concerns about privacy breaches.
We take user data privacy protection very seriously and will publicly disclose the audit details in the future.
