I must say that after doing a bit of reading anyway while sipping my beer(s) tonight I see room for a couple of much needed improvements.
It *CAN* do that generically or by exe, but by default it does not prevent access to (reading) anything, including My Documents [Unless I missed something and reading isn't a form of access now¿]. Oh and how exactly are we supposed to use Sandboxie to allow only certain websites access to specific locations on the computer? I must have missed that memo... /coughData Protection
Sandboxie restricts and blocks internet websites and programs from accessing your personal data (i.e. My Documents), files & folders on your system
To put it shortly: It doesn't sift via websites at all, but it can sort by program exe's (which need to be defined manually). [yet still not dlls or even hashes] meaning that all some code needs to do is copy the name of the initial entry point. eg, if firefox is the primary program running, we copy that (via some loaded dll) and create the new process with the same .exe name eg firefox.exe.
Here we are with something that likley equates to the layman/new user as - "If you test it" (said program) inside Sandboxie and it doesn't do anything bad in the sandbox then it might actually be safe. (ignoring the oft shared advice that sandboxie isn't undetectable and a program might behave differently inside!)Application Testing
Safely test and try new programs and applications within Sandboxie and prevent unauthorized changes to your underlying system that may occur
Quite a few posts I've lol'd at (or straight up ignored) personally from new users suddenly make quite a bit more sense. =( /me is not happy atm
Sure they both make a decent amount of sense from a marketing perspective but I'll be darned if I don't think they are simply wrong, at least phrased as they currently exist, atm.