Privacy in the sandbox

What the demo keeps in your browser

• An encrypted cookie with a random visitor id and the ids of your sandbox banks. It lasts 7 days.
• After you connect a bank through Silkroute Link, a second encrypted cookie that lasts one hour.
• Your language, theme and tour step, in your browser’s storage.

What the sandbox server keeps

• The data your sandbox creates: two banks with generated transactions, the company group, cards, transfers, scenarios and a record of what you did there.
• Anything you type into a form, such as a card holder name. Please do not type real names or account numbers.
• Inside Telegram only: your Telegram user id and language, so that sandbox notifications reach your chat.

For how long

• Your sandbox is deleted automatically about 24 hours after your first visit. Reset deletes your company group at once and disconnects your banks; their data goes with the rest at the 24-hour mark.
• Request logs (method, path, status and timing) are deleted after 2 days, and the record of actions after 7 days.

Your IP address

The demo holds your IP address in memory to limit how many requests one address can send. The sandbox does not store it. The hosting providers (Vercel, Railway and Neon) keep their own short technical logs.