The short version: BluBox has nothing to collect. The long version fits on one page, and every claim on it can be checked.
There are no accounts, so there is nothing to sign up for and nothing to know you by. There are no analytics, no trackers, no tracking pixels, and no cookies — the app sets none, and nothing on this site phones home. BluBox never asks you to connect a wallet; a version that does is fake.
Two places, and you can watch both in your browser's own network inspector:
Your watched addresses, groups, settings, and the ledger cache live in your browser's own storage, on your device. They are never uploaded — there is nowhere to upload them to. On phones, the optional BluBox-Vault encrypts the personal slots with a password that is never stored anywhere; it is the key. The Export String is the only copy of your setup that ever exists, and it exists only when you make it, only where you put it.
The Suggest or Correct button sends exactly the text you typed — nothing more — relayed to the project's mailbox. It carries no reply address unless you include one yourself.
The site is served through a hosting network (Cloudflare), which — like every host on the internet — keeps standard connection logs of the requests it serves. BluBox adds nothing to those logs, reads nothing from them, and receives no analytics from the host.
Every claim above is a claim about code, and the code is checkable: blubox.watch/verify downloads the live files, hashes them in your own browser, and answers MATCH or MISMATCH against the published release fingerprints. A policy you can verify beats a policy you have to believe.
This policy ships like code — in the open, hash-covered, changed only by a new release. First published 2026-08-05.