A lease that ends without you never deletes a sandbox's disk
Only a request from you deletes data. Previously a sandbox created with onTimeout: "delete" had its disk deleted when its lease ended before its time limit (a renewal that did not arrive, or a pause that failed at the lease's end), and a sandbox created with pausable: false, one on a server that stopped responding, or one stopped while moving between servers had its disk deleted when its lease ended or it crashed. Each is now kept: a pausable sandbox as a stopped sandbox you can restart, billed as paused storage; the others at no charge, until you delete them. onTimeout: "delete" still deletes the disk when the time limit you set ends.