Privacy Policy

Kiste is built and operated in Germany under the GDPR. This page summarizes how we handle personal data; the authoritative German-law version is available on request.

What we store

Account data (email, hashed credentials), operational metadata about your machines (names, lifecycle events, resource usage), and the contents of your sandbox disks. We do not sell data, run third-party ad trackers, or profile users.

Where it lives

All sandbox and machine data is stored on infrastructure in the European Union and encrypted at rest. Control-plane metadata is processed at the network edge with EU jurisdiction safeguards.

Your rights

You can request access, correction, export, or deletion of your data at any time: luka@lukaloehr.com. Deleting a machine destroys its disk; deleting your account removes all associated data.