Privacy and data retention
Effective 2026-08-05 · nitro.vn / nitrolet.com · preview
What we hold, why, where it lives, and when it goes away. Written from the actual implementation rather than from a template — every claim below corresponds to something in the repository, and where the honest answer is "not yet", it says that.
What we hold about you
| what | why | where |
|---|---|---|
| Email address, password hash, session records | so you can sign in | PostgreSQL on the host in Ho Chi Minh City |
Your handle (the part before @, normalised) | it is half of every box hostname you own | same |
| SSH public keys you register, with a label and the date | so ssh into your box works | a root-only file on the host |
| Box records: name, owner, IP, public/private, created-at | to run and route your boxes | a root-only file on the host |
| Volume records: name, size, which box it is attached to | to attach your disks | same |
| Invite redemption: which code, which email, when | so we know how each account came to exist | a root-only file on the host |
| Server logs: request path, status, source IP, timestamps | to run the service and investigate abuse | the host's journal |
We do not hold your password (only a hash), your SSH private key (we never see it), payment details (there is nothing to pay), or any analytics, advertising or third-party tracking. The landing page and the dashboard load no third-party scripts and set no cookies other than your session.
What is inside your box
Your box's contents are yours and we do not read them. In practice:
- The platform never inspects a guest's filesystem or memory as a matter of course.
- ⚠️ But it is not encrypted against us, and we will not pretend otherwise. A snapshot of a box captures its RAM and disk, encrypted at rest with a key this host holds. An operator with root on the host can therefore reach the contents of a running or captured box. That is a property of running microVMs on a machine somebody administers, and no provider's policy changes it.
- Do not put secrets in a preview box that would hurt you if the host were seized or compromised.
Who else sees it
- CloudFly, our infrastructure provider, operates the physical machine and the object storage.
- Nobody else. We do not sell, share or rent any of the above. There is no analytics processor, no advertising network, no data broker.
- Law enforcement, if compelled by a valid Vietnamese legal process. We will tell you unless we are legally prohibited from doing so.
Where it lives
Ho Chi Minh City, Vietnam — one machine, plus CloudFly object storage in the same country for volume data and backups. Nothing is replicated to another region. If you are subject to a rule about where your data may reside, this is the fact you need.
How long we keep it
| what | retained |
|---|---|
| A box you delete | destroyed immediately, along with its disk and its snapshots |
| A volume you delete | the record goes immediately; the stored chunks are collected by the hourly GC, which keeps the last 5 generations |
| Server logs | the host journal's rotation, currently a few weeks |
| Encrypted service backups | 14 rolling hourly copies, then deleted |
| Your account, after you ask us to delete it | removed within 30 days, including SSH keys, box and volume records |
| Invite redemption records | kept while the account exists — it is the only record of how an account came to be |
⚠️ A backup can outlive a deletion by up to 14 hours. If you delete your account, it disappears from the service immediately and from the newest backup within an hour, but older encrypted copies still contain it until they rotate out. Saying "deleted everywhere instantly" would be false.
Your choices
- See what we hold: the dashboard shows your account, keys, boxes and volumes. That is the whole set apart from logs.
- Delete a box or a key: yourself, immediately, in the dashboard or over SSH. Revoking a key re-pushes the remaining set to every running box, so the door closes on boxes that already exist.
- Delete your account: email support@nitro.vn. ⚠️ Self-service account deletion is not built yet — it is a request we handle by hand, and this line will change when it is automated.
- Export: ask, and we will send you the records above. There is no export button yet either.
Security
TLS everywhere with HSTS, private-by-default sandboxes, ownership checks on every action, short-lived tokens with revocation, encrypted snapshots and volumes, SSH key-only host access, and per-account quotas. The full engineering detail is public in the repository, including the parts that are not finished.
Breach: if we believe your data has been exposed, we will email you within 72 hours of establishing that, with what happened and what to do. We would rather send an early, incomplete notice than a late, tidy one.
Contact
- support@nitro.vn — accounts, deletion, export, anything else
- abuse@nitro.vn — abuse reports (see the acceptable use policy)
- security@nitro.vn — vulnerability reports; we will not pursue you for a good-faith report
Changes
Posted here with a new effective date. A change that materially widens what we collect or how long we keep it will be emailed to account holders before it takes effect.