Orblealpha

Privacy policy

Last updated November 9, 2026.

This policy explains what Orble ("we") collects when you use orble.tech, the Orble CLI and the boxes you run with them, what we do with it, and when we delete it. Questions or requests: info@orble.tech.

What we collect

  • Your account. When you sign in with Google we receive your name, email address, Google account ID and profile picture. We use them to identify your account and to contact you about it: a welcome message when you sign up, a warning when your credit falls under $1 and under $0.50, and notices about the service. We show the picture, from our own servers, only to you.
  • What you give us to run boxes. Your SSH public keys, your boxes' names, and the apps you connect over MCP. We store only hashes of the tokens we issue to the CLI and to those apps, and of the links to your boxes' desktops.
  • Usage and billing records. When each box was created, running, suspended or deleted, its size, and the credit you bought and spent. For each payment, its amount and status, and Stripe's record of the checkout, which includes the email address and any other details you gave Stripe.
  • Measurements of your boxes. Each box's CPU, memory, network and disk use, and the total size of a few kinds of folders in it (described below). We keep these for 30 days.
  • Technical logs. Our servers record IP addresses and request details, the addresses that connect to your boxes over SSH, and the addresses on mail sent to orble.tech, for security and troubleshooting. We keep these logs for 30 days.
  • Email to orble.tech addresses. Mail you send to an @orble.tech address is forwarded to our mailbox, which Google hosts.

Your boxes' contents

What you store and run in a box is yours. Our systems handle it only to run the service:

  • Every minute, the node agent reads how full each running box's disk is and how much it reads and writes. Every six hours, while a box is in use, it adds up the size of a few kinds of folders in the box (such as node_modules, git repositories, caches, the browser profile and Docker). Only these totals leave the box, never file names or contents.
  • Every six hours, a scan on our server reads the boxes' disks and memory images to measure how much of the data is duplicated or compressible. It keeps only totals.
  • About an hour after a box is suspended, an encrypted copy of its disk and memory goes to Cloudflare R2. A day after the suspend, the copy on our server is deleted, and resuming the box brings it back. We hold the encryption keys.

Because we run the servers, we can technically reach what's in your boxes. We don't look at it, except to help when you ask us to, to investigate abuse or a security problem, or when the law requires it.

How we use it

To provide and secure Orble, to charge usage against your credit, to prevent abuse, to plan capacity, and to tell you about your account and changes to the service. We don't sell personal data and don't use it for advertising.

Who else handles it

  • Latitude.sh, which hosts our servers, your boxes and our database in the United States.
  • Cloudflare, whose R2 storage holds encrypted copies of suspended boxes and our encrypted database backups.
  • Google, when you sign in with Google, and for mail sent to orble.tech.
  • Stripe, which processes payments when you add credit. We give it your email address; it handles card details, which we never see or store.
  • Cloudflare (1.1.1.1) and Quad9, which answer your boxes' DNS lookups.

We may disclose information when the law requires it, or to protect Orble, our users or others from harm.

Keeping and deleting it

We keep your account data while your account exists.

Deleting a box deletes its disk and memory image on our server at once, and its copy in Cloudflare R2 within two days.

Deleting your account, in Settings or by emailing info@orble.tech, deletes your boxes as above and, at once, everything our database holds about you: your name, email address, Google account ID, profile picture, SSH keys, connected apps, boxes, usage, credit and payment records. Unused credit is lost. Copies remain for up to 30 days in our encrypted database backups, in our logs and in our measurements, and then they are deleted too. Stripe keeps its own record of your payments under Stripe's privacy policy.

To see, correct or export your data, email info@orble.tech. We'll answer within 30 days. Depending on where you live (for example in the EU, UK or California), you may have further rights under local law, and you can complain to your data protection authority.

Other things

Orble isn't meant for anyone under 16. Our servers are in the United States, so your data is processed there. If we change this policy in a way that matters, we'll say so on this page and email account holders before the change takes effect.