Privacy Policy

We can decrypt your backups. This is not a zero-knowledge service.

Say it plainly: ManaBucket holds the key material needed to decrypt your world backups, and we use it so that restoring or downloading a backup from your browser actually works. Your data is encrypted in transit and encrypted at rest in storage, but it is not encrypted in a way that only you can undo. A member of our team with access to the relevant systems, or someone who compromises those systems, could in principle decrypt your backups.

We are telling you this directly rather than letting "encrypted" imply more than it does. A backup product that quietly overstated its encryption model would be worse than one that is honest about the tradeoff. Bring-your-own-key encryption, where we never hold the key at all, is a possible future option for customers who don't need browser-based restore - it does not exist yet, and we will not claim it does before it ships.

Where your data is stored

Backups are stored on Cloudflare's global network, not in a single fixed region and not exclusively within any one country, including for customers in the EU. We rely on Cloudflare's standard data protection terms (its Data Processing Addendum and Standard Contractual Clauses) to govern that storage, the same safeguard most cloud-backed services of our size use rather than maintaining separate region-pinned infrastructure. If your own compliance requirements need your backups kept in a specific jurisdiction, contact us - it's not something we offer today, but it's a conversation we're glad to have.

What we collect

• Account information: your email address, and a password hash if you sign up with a password (we never store the password itself). If you sign in with Google, Discord, or GitHub, we receive the identifier and email address those providers share with us.
• Billing information: handled by Stripe. We store your Stripe customer and subscription IDs, plan, and billing history - never your raw card number.
• Server and world metadata: hostnames, world names, folder paths, world sizes, and backup schedule/retention settings, so the dashboard can show you what's protected.
• Your world data itself: the actual backed-up server files (world data, and - unless you choose world-only backups - plugins, mods, and configs), encrypted as described above.
• Operational logs: agent connection status, job outcomes, and error codes, so we can alert you to failures and support you when something goes wrong. We do not log repository passwords, device tokens, or R2 credentials, ever - not even in truncated form.

Why we collect it

To run the service: take scheduled backups, let you browse and restore them, bill you correctly, alert you when a backup fails or your machine goes quiet, and provide support when you ask for it. We do not sell your data, and we do not use your world data to train anything.

Retention after cancellation

Cancelling stops new backups but does not delete anything right away. Your account enters a 30-day grace period: nothing is deleted, and you can still restore from what's already there. We'll email you at day 1, day 15, and day 25 with the exact deletion date and a one-click way to reactivate.

For an annual subscription, the 30 days is measured from when your paid term ends, not from the day you click cancel - cancelling partway through a paid year does not cut your access short, and the grace period doesn't start early either.

At the end of the grace period, we permanently delete your backup data, the operational records tied to your account, and your identity records (email, password hash, OAuth links). We keep a minimal billing record for financial and legal recordkeeping, with the personal identifiers removed from it.

Who we share data with

Infrastructure providers that make the service work: Cloudflare (hosting, storage, email delivery) and Stripe (payments). We do not share your data with anyone else, except where required by law.

Your choices

You can delete individual worlds, revoke a machine, download or delete your backups, and cancel your account at any time from the dashboard. Contact us to request a full copy or deletion of your account data outside of that flow.

Contact

Questions about this policy, or a request related to your data: hello@manabucket.com.