Downloading your data (“Datele mele”)

How to download a copy of your personal data, orders and invoices, and what the file contains.

The “Datele mele” (My data) card on the “Profilul meu” (My profile) page (blackbox.md/account, “Contul meu” (My account) → “Profil” (Profile)) lets you download a copy of your account data as a single JSON file: personal data, orders, invoices, payments, balance, support tickets and servers. This is how you exercise your right to data portability under Law No. 195/2024.

Available to: the blackbox.md account holder, signed in to blackbox.md. This feature does not exist in the app.blackbox.md panel.

The blackbox.md website is available in Romanian and Russian; this article quotes the Romanian labels with their English meaning.

How to download your data

Sign in to blackbox.md and click “Cont client” (Customer account) in the top bar (on a phone, the circle with your initials). The “Profilul meu” (My profile) page opens; in the account menu it is called “Profil” (Profile).
Find the “Datele mele” (My data) card, with the text “Descarcă o copie a datelor tale personale, comenzilor, facturilor și serviciilor (portabilitatea datelor — GDPR / Legea 195/2024).” (Download a copy of your personal data, orders, invoices and services — data portability under GDPR / Law 195/2024.) The card is below “Serviciile tale” (Your services): on a wide screen, in the right-hand column; on smaller screens, scroll down the page.
Click “Descarcă datele mele” (Download my data). The button becomes inactive and shows “Se pregătește…” (Preparing…).
Your browser saves the file blackbox-export-YYYY-MM-DD.json, where YYYY-MM-DD is the download date in UTC (for example, blackbox-export-2026-10-09.json). You will find it in your browser's downloads folder.
The button changes back to “Descarcă datele mele”. No other confirmation message appears.

If “Eroare la descărcare. Încercați din nou.” (Download error. Please try again.) appears below the button, see the “Limit and errors” section below.

Security The file contains personal data: email, phone number, IP addresses, billing details and the messages in your support tickets. Keep it somewhere safe and do not send it over insecure channels. The file does not contain passwords or full API tokens, so it cannot be used to sign in to your account.

What the file contains

The file is a JSON object with one section for each type of data. The section names are in English, exactly as they appear in the file.

Section	What it contains
`exported_at`	The date and time the file was generated (UTC).
`subject`	Your account details: email, name, phone, email language, the date your email was verified, the date the account was created, the versions of the Terms and of the Privacy Policy you accepted, and the date and method of acceptance.
`orders`	Your orders: the `BBX-…` number, plan, status, total in MDL, contact details, chosen configuration, the IP address and browser you ordered from, and the activation state and date.
`invoices`	Your invoices, each with its line items: number, status, amounts, description, issue date, due date and payment date.
`payments`	Your payments: type, amount, currency, status, payment processor, transaction ID and proof of the consent you gave at payment.
`balance`	Your current balance, the autopay status and every balance transaction, with the remaining balance after each one.
`billing_profiles`	Your billing details: type, name, company details (IDNO, address, bank, IBAN), contact person and phone.
`tickets`	Your support tickets (number, subject, status, priority, language, dates) with all their messages. The author of each message appears as `customer` (you) or `staff` (the BLACKBOX team, without names).
`servers`	The servers that belong to you: name, IP, state (active or not), the date from which each one belongs to you, and technical labels.
`server_labels`	The private names you have given your servers in the panel, with each server's IP.
`api_tokens`	Your API tokens: name, the first characters and the last 4 characters, permissions, creation date, last use, expiry and revocation. The full token never appears.
`identities`	Linked Google or GitLab accounts: provider, the email at the time of linking, the linking date and the date of last use.
`access_log`	The last 200 access and security events on your account (for example, sign-ins, sign-outs, password changes, opening the panel): type, IP, browser, whether it succeeded, and date.

Note Amounts in payments and balance are in bani, hundredths of a leu (1 MDL = 100 bani): 5000 means 50.00 MDL. Dates and times are in ISO 8601 format, with the time zone at the end (+00:00 means UTC); dates in invoices appear as a day only, for example 2026-10-09. Fields without a value appear as null.

What the file does not contain

the passwords for your account and the panel, the secrets and codes for two-factor authentication (2FA), or full API tokens;
server access credentials (the root password and others);
the SSH keys saved in your account: you can see them on the “Chei SSH” (SSH keys) page (see SSH keys in your account (blackbox.md));
DNS provider connections (Cloudflare, GoDaddy): see Connecting Cloudflare or GoDaddy on the DNS page;
alert preferences: see Alerts and email notifications;
company servers that BLACKBOX has given you access to but that do not belong to you: the servers section includes only your own servers. The private names you have given these servers still appear in server_labels.

How to open the file

Browser: drag the file into a browser window. Some browsers (for example, Firefox) show it as a tree that you can collapse and expand.
Text editor: Notepad (Windows), TextEdit (macOS) or any code editor. The file is in UTF-8, and the data is written compactly on a single long line. A code editor that formats JSON splits it into lines so that it is easy to read.
Another service or program: JSON is a structured format that programs read automatically. You can import it into other systems; that is the purpose of data portability.

Limit and errors

You can download your data at most 3 times in 24 hours per account. Downloads from the last 24 hours are counted: 24 hours after the first download, one attempt becomes available again. Refused attempts do not extend the wait. Separately, at most 10 downloads can be made from the same IP address in 24 hours, across all accounts.

What you see	Possible cause	What to do
“Eroare la descărcare. Încercați din nou.” (Download error. Please try again.) after several downloads	You have reached the limit of 3 downloads in 24 hours.	Come back 24 hours after the first of them.
The same error after the page has been open for a long time	Your session on blackbox.md has expired (it lasts 8 hours).	Reload the page and sign in again.
The same error on the first attempt	A temporary network or server problem.	Try again in a few minutes. If the error persists, contact us.
The “Datele mele” (My data) card is missing	The page did not load completely.	Reload the page. If you still do not see the card, contact us.

Alternative: request by email

If you cannot use the button, or you need data other than what is in the file, send a portability or access request to support@blackbox.md from your account's email address. If you write from a different address, we may ask you for additional identity verification. We reply within one month at most; in complex cases this period can be extended by at most two more months, and in that case we tell you the reasons. Details: Your rights regarding personal data.

Frequently asked questions

Can I download my data from the app.blackbox.md panel? No. The “Datele mele” (My data) card exists only on blackbox.md, on the “Profilul meu” (My profile) page. The file does, however, also include the private names you have given your servers in the panel.

What should I do before deleting my account? Download your data first. After deletion you can no longer sign in, and your personal data is anonymized. See Deleting your account.

Why are some fields null? The field has no value: for example, you have not entered a phone number, or your email is not verified yet. For accounts created before September 2026, the details about accepting the Terms may be missing.

Is the download recorded? Yes. Each download is recorded as a security event (customer_data_exported). You will see it in the access_log section of the next file you download.