Your media, your privacy

LightBox is a personal media library, not an advertising business. It runs on hardware the operator controls, collects only what it needs to work, and uses no third-party analytics or trackers. Your media is private by default and stays that way until you choose to share it.

Core principles

• Minimal data by design — we store only what the service needs.
• Private by default — your uploads are yours until you explicitly share them.
• No third-party analytics, ad networks, or behavioral tracking.
• No selling your data, and no training AI models on your media.

To operate your account and library, LightBox keeps the following:

• Account details — your username, a salted hash of your password (never plain text), and, if you use it, an identifier from your Google or GitHub sign-in.
• Your media — the image, video, and audio files you upload, stored on operator-controlled disks.
• Library metadata — things like batch and file names, upload timestamps, processing status, and your own “liked” / “hidden” flags.
• Share state — whether a batch is shared and its share token, so public links resolve.
• A session cookie — to keep you signed in.

LightBox is ad-free and tracker-free. We do not run advertising networks, set advertising cookies, or load third-party analytics scripts. We do not build a profile of you, sell your information, or use your uploaded media to train AI models. There are no per-view analytics counting who watched what.

Like any web server, the infrastructure may keep basic technical logs — IP address, browser type, requested path, and timestamps — for security, debugging, and performance. This data is used only to operate and protect the service. It is not sold, not shared with third parties, and not used to identify or profile individual users.

Nothing you upload is public unless you share it. When you share a batch, LightBox creates a token-based public link.

• The link contains a long, unguessable token — it is not listed or indexed by us.
• Anyone who has the link can view the shared media without signing in, so share it only with people you trust.
• You can revoke access at any time by setting the batch back to private, which disables the link.

Your account and media live on hardware the operator runs and controls — not a third-party cloud provider. Sign-in is shared with the operator's other site (Arc Codex) through a common session, so a single account works across them.

If you choose Google or GitHub sign-in, that provider handles authentication and may log the request under its own privacy policy. We receive only the identifier needed to recognize your account.

Some library content originates from the operator's own DVDs, format-shifted for personal use. That media belongs to the operator; it is not collected from or about you.

You can delete individual media items or whole batches at any time from within LightBox. Deleting removes the underlying file and its metadata. To remove your account entirely, or for any other privacy request, contact us using the email below.

We may update this policy to reflect legal or operational changes; the “Last updated” date above will reflect the latest revision. Questions, deletion requests, or privacy concerns can go to ross@arc-codex.com.