Privacy
Effective from 6 Nov 2026 (statistics added 6 Nov 2026, location refined and reports 4× a day from 7 Nov 2026, remote access and backup to another Holbox 13 Nov 2026) · Holbox NAS Home
- Your files stay on your NAS only. The author has no access to them and nothing is sent anywhere.
- Four times a day the NAS anonymously reports that it is running and its version – no personal data, no files. Turn it off on the NAS in Settings → Anonymous statistics.
- Otherwise the NAS connects to the internet only for updates, notifications you set up yourself and messages to the author when you send one.
- This website uses no cookies, analytics or ads.
Controller
Ondrej Holba, author of Holbox NAS Home. Contact: prodaco.servis@gmail.com, or directly from the NAS via 💬 Write to the author.
Website holbox.cz
- The website runs on Cloudflare Pages. As the hosting provider, Cloudflare processes technical data about each request (IP address, browser type, time) to deliver the page and protect it from attacks. The author does not collect or analyse this data.
- The website uses no cookies, analytics or advertising tools. Only the light/dark theme choice is stored in your browser (localStorage) and never leaves your computer.
Updates
The NAS downloads new versions from the repository repo.holbox.cz (Cloudflare R2) and official Debian mirrors. This necessarily passes on its IP address and version label (e.g. HolboxNAS/1.51.0). The author keeps no records of these requests.
Anonymous usage statistics (NAS)
| What is sent | four times a day (roughly every 6 hours): a random installation ID (created on the NAS, not linked to you as a person nor to the NAS number used for messages) and the Holbox NAS version. The server stores the date and time of the latest report – that is how it knows how many NASes are running right now. |
| What the server adds | an approximate location based on the IP address (country, region, city; coordinates rounded to about 5 km), provided by Cloudflare. IP-based location is at most city-level, often just the internet provider's location. The IP address is not stored; the installation ID is stored only as a one-way hash. |
| Why | to know how many NASes and which versions are in use and where – for planning development and support (legitimate interest of the author, Art. 6(1)(f) GDPR). |
| How it is shown | only as summaries: counts, versions and cities (approximate, from the IP address) – no individual NASes, no addresses. |
| How long | 400 days, then records are deleted automatically. |
| Opting out | at any time on the NAS: Settings → Anonymous statistics. The NAS then sends nothing. |
Downloading the installation ISO
When you download the ISO from this website, one download is counted: the day, version and approximate area from the IP address (as above). So that the same device is not counted several times a day, a non-reversible fingerprint (from the IP address and browser, with a secret key and the date) is kept for that day only; the IP address cannot be derived from it. It is discarded the next day; the IP address is not stored. Summaries are kept for 400 days. The file itself is served from Cloudflare R2 storage (repo.holbox.cz).
Notifications via Telegram and e-mail
Only if you enable them on the NAS. The NAS sends them straight to your Telegram bot or e-mail account – through those services, under their terms. The author cannot see them.
Remote access (Tailscale) and backup to another Holbox
Remote access is off until you turn it on in the NAS (Settings → Network). The NAS then uses the Tailscale service (Tailscale Inc., USA) – you sign it in to your own Tailscale account and the connection between your devices is encrypted directly between them; under its terms Tailscale only knows the devices in your network and their addresses, not the content of the traffic. The author of Holbox NAS has no access to the account or the connection. You can sign the NAS out at any time in the same place.
Backup to another Holbox (pairing with a code) goes directly between your two NASes – over the home network or Tailscale. Nothing passes through the author or his servers and nothing is stored there.
Messages to the author (💬 Write to the author)
| What is stored | the text of messages and replies; your contact if you fill it in; system information if you attach it (versions of Holbox NAS, Debian, kernel, ZFS and Samba, CPU, memory, number of pools and disks, language); a random NAS ID (created with the first message, not linked to you as a person); the country estimated from the IP address; message times. |
| What is not stored | The IP address. Against spam, only a non-reversible fingerprint of the IP address (with a secret key and the date) is kept briefly (until the message limit window expires); the IP address cannot be derived from it. |
| Why | to be able to reply and improve the software – legitimate interest of the author (Art. 6(1)(f) GDPR). Sending a message is voluntary. |
| How long | 12 months after the last message in the conversation, then everything is deleted automatically. You can delete it yourself at any time on the NAS: 💬 in the top bar → Inbox → Open → Delete also from the author's database (GDPR), or everything at once with Delete all my messages from the author's database (GDPR) – deleted immediately on the server too. (“Hide from list” only hides the conversation on the NAS; the author keeps it.) |
| Who can see it | only the author (protected reply interface). |
| Where it is stored | in a Cloudflare D1 database on the author's account. |
Processor and transfers outside the EU
The website, the update repository, the messages and the statistics are operated for the author by Cloudflare, Inc. (USA). Transfers to the USA take place under the EU–US Data Privacy Framework, in which Cloudflare participates, and under Cloudflare's data processing terms.
Your rights
You have the right to access your data, to rectification, erasure, restriction of processing and to object. You can delete your own messages yourself on the NAS (see above); otherwise just write to prodaco.servis@gmail.com or via 💬 Write to the author – in an e-mail please include your NAS number (shown on the NAS in the ⓘ About Holbox NAS window). We will handle it without undue delay, at the latest within one month. You also have the right to lodge a complaint with a supervisory authority – in the Czech Republic the Office for Personal Data Protection (uoou.gov.cz).
Changes
If Holbox NAS starts processing further data, this page will be updated beforehand and the date above changed.