Legal

Privacy

Last updated October 16, 2026

The short version: this website counts visits anonymously, unless you arrive through a personal link we sent you. Your box is where your conversations live, and they stay there.

This website

ownbox.io sets no cookies, except one when a partner's link brought you here (below). It is hosted by Vercel, which, like any web host, processes the technical details of each request — your IP address, your browser, and the page you asked for — in order to serve the page and keep the site running. The forms on the site are the contact form, the partner application and the sign-up on Start free, below.

Analytics

To learn which pages help people, we count visits with PostHog: the pages you view, the links and buttons you click, the site that sent you, and your general location and device type. It sets no cookies; it keeps an anonymous id in your browser’s storage so one visit is not counted as several, and clearing your browser storage removes it. It does not record your session or replay your visit. It also keeps the campaign tags on the link that brought you (the utm_ part of a web address) in your browser’s storage, never a cookie. If your browser sends Do Not Track, nothing is collected at all.

We may ask an optional question in a small box at the corner of the page. Your answer is kept with the rest of your visit, and you can close it without answering.

One exception: a personal link. Links in emails we send carry a short reference to you (pid= in the address). If you arrive through one, your visits are linked to that reference, so we can see that our email led you here and what you read. Only a link like that does this; anyone arriving any other way stays anonymous. If you then follow a link from this site to brian-macdonald.com, our other site, the reference goes with you, so your visits to both count as one. Clearing your browser storage removes the reference.

A partner's link. If a partner sent you here (p= in the address), your browser remembers that partner until you close the tab, and a checkout you start passes their name to Stripe so the sale is credited to them. It is kept in your browser's storage for that visit only, never a cookie.

A link from our partner program. If you arrive through a link from someone in our partner program (aff= in the address), Partnero, the service that runs the program, records that the link was used and keeps a cookie in your browser for 60 days that names the partner. If you buy within those days, the checkout passes that name to Stripe so the partner is credited with the sale, unless another partner's p= link brought you on that same visit, which is then credited instead. It is the one cookie this site sets, and only a link like that sets it. Clearing your browser's cookies removes it.

PostHog keeps these visits, including any linked to a personal link, for one year, then deletes them.

When you write to us

The contact form takes your name, your email address and your message, and sends them to our inbox so we can reply. Nothing is stored on this website and nothing is added to a mailing list. The message is delivered by Resend, our email provider, which handles it in order to deliver it.

The partner application works the same way: what you enter is emailed to us so we can review it, nothing is stored on this website, and we send you one email to say it arrived.

The sign-up on Start free works the same way: your work email, and your answers to the questions after it, are emailed to us so a person can walk you through building your first machine. Nothing is stored on this website and nothing is added to a mailing list. We send you one email with the first step, and after that we write to you ourselves.

The Ownbox overview (“Get the Overview” in the header, and the form at the foot of the homepage) takes your email address and nothing else, and we send you the overview once. If you also ask for occasional updates as new Machines become available (the header's box, which starts unticked, or the homepage form, which says so under its button), we keep your address with Resend, tagged Ownbox, so we can send them. Every update has a link to unsubscribe, and once you use it we send you nothing more. If you only asked for the overview, we keep nothing. We also email ourselves a note of each request, with the page it came from. Nothing is stored on this website.

When you buy

Checkout happens on Stripe's own payment page. Your card details go to Stripe and never pass through this website. Stripe handles them under its privacy policy.

When you book a call

The booking page is run by Cal.com. What you enter there goes to Cal.com and to us, so that we can hold the call, under Cal.com's privacy policy.

Your box

Your conversations are stored in your box's own database, on its own server. Nothing we run reads them. While we host your box, its backups stay with the same hosting provider and nowhere else, and once you move it to your own account we have no access at all.

• While we manage your box, we hold operator access to the machine so we can keep it running. You can revoke that access at any time, and the box keeps working.
• You can take the box home to your own account with one click, whenever you choose.
• If you turn on the AI, it runs on your own API key and that provider bills you. We never hold your key.

Questions

Book a call and ask. See also the terms.