Privacy Policy

We can decrypt your backups. This is not a zero-knowledge service.

Say it plainly: ManaBucket holds the key material needed to decrypt your world backups, and we use it so that restoring or downloading a backup from your browser actually works. Your data is encrypted in transit and encrypted at rest in storage, but it is not encrypted in a way that only you can undo. A member of our team with access to the relevant systems, or someone who compromises those systems, could in principle decrypt your backups.

Bring-your-own-key encryption, where we never hold the key, may come later for customers who don't need browser-based restore. It doesn't exist yet.

Where your data is stored

Backups are stored on Cloudflare's global network, not in a single fixed region and not exclusively within any one country, including for customers in the EU. We rely on Cloudflare's standard data protection terms (its Data Processing Addendum and Standard Contractual Clauses) to govern that storage, the same safeguard most cloud-backed services of our size use rather than maintaining separate region-pinned infrastructure. If your own compliance requirements need your backups kept in a specific jurisdiction, contact us - it's not something we offer today, but it's a conversation we're glad to have.

What we collect

• Account information: your email address, and a password hash if you sign up with a password (we never store the password itself). If you sign in with Google, Discord, or GitHub, we receive the identifier and email address those providers share with us.
• Billing information: handled by Stripe. We store your Stripe customer and subscription IDs, plan, and billing history - never your raw card number.
• Server and world metadata: hostnames, world names, folder paths, world sizes, and backup schedule/retention settings, so the dashboard can show you what's protected.
• Your world data itself: the actual backed-up server files (world data, and - unless you choose world-only backups - plugins, mods, and configs), encrypted as described above. These files can include information about your players, such as usernames, account IDs, inventories, and any IP addresses in your server's ban list. Server logs are excluded by default.
• Contact messages: the email address, subject, and message you send through our contact form, delivered to us by email.
• Operational logs: agent connection status, job outcomes, and error codes, so we can alert you to failures and support you when something goes wrong. We do not log repository passwords, device tokens, or R2 credentials, ever - not even in truncated form.

Why we collect it

To run the service: take scheduled backups, let you browse and restore them, bill you correctly, alert you when a backup fails or your machine goes quiet, and provide support when you ask for it. We do not sell your data, and we do not use your world data to train anything.

Retention after cancellation or deletion

Cancelling a paid plan: you keep your plan until the period you paid for ends, monthly or annual. Then a 30-day grace period starts: no new backups run, but you can still restore and download everything. At the end of it we permanently delete your backups, and your account continues on the free Space plan.

Deleting your account: access ends immediately and the 30-day grace period starts right away. You can still restore and download during it, or reactivate to undo the deletion. At the end of it we permanently delete your backups, the operational records tied to your account, and your identity records (email, password hash, sign-in provider links). We keep a minimal billing record for financial and legal recordkeeping, with your personal identifiers removed.

Either way, we email you on day 1, day 15, and day 25 of the grace period with the exact deletion date and a one-click way to reactivate.

Deleting permanently: you can also skip the grace period. After you confirm through a link we email you, everything above is deleted immediately and can't be recovered.

Failed payments: new backups pause until the payment succeeds, and nothing is deleted. If the subscription ends unpaid, the cancellation rules above apply.

Who we share data with

Infrastructure providers that make the service work: Cloudflare (hosting, storage, email delivery) and Stripe (payments). We do not share your data with anyone else, except where required by law.

Your choices

You can delete individual worlds, revoke a machine, download or delete your backups, and cancel your account at any time from the dashboard. Contact us to request a full copy or deletion of your account data outside of that flow.

Contact

Questions about this policy, or a request related to your data: hello@manabucket.com.