Privacy Policy

Dockstash provides one-click, verified backups for Docker projects. This policy explains what personal data we collect when you visit dockstash.com or use the Dockstash service, why we collect it, and the rights you have over it. Dockstash is the data controller for the personal data described here.

On the Free / self-hosted tier the entire pipeline runs on your own infrastructure. In that case we receive no personal data from your installation at all, and this policy applies only to your use of this website and any hosted account you create.

We collect only what the service needs to function:

• Account data — your email address, display name, password (stored only as a bcrypt hash), language preference, and account timestamps.
• Project configuration — project names, the connection details of the servers you back up, container and service metadata, and backup schedules you define.
• Encrypted secrets — the SSH keys and Restic repository passwords you provide are stored exclusively as AES-256-GCM ciphertext. They are never stored or logged in plaintext.
• Billing data — payments are processed by Polar, our merchant of record. We store your subscription tier and status; we never see or store your card number.
• Operational records — backup job outcomes, restore-drill results, audit events, and the alert emails we send you, so you can see what happened and when.
• Support communications — messages you send us, so we can reply.

Your backup contents never touch our servers. Backups are encrypted and deduplicated on your production server and land on your own storage VPS as standard, encrypted Restic repositories. Dockstash orchestrates the backup; it does not host, read, or copy the data inside it.

We also run no third-party analytics, no advertising trackers, and no social-media pixels on this site.

We use the data above to:

• operate your account and run the backup schedules you define;
• send transactional email via Resend — verification links, backup and restore-drill alerts, billing notices, and account-deletion warnings;
• process subscriptions and payments through Polar;
• secure the service, prevent abuse, and debug failures;
• comply with legal obligations.

We do not sell personal data, use it for advertising, or share it with data brokers.

Where the GDPR applies, we rely on:

• Contract — account, project, billing, and operational data are processed to deliver the service you signed up for;
• Legitimate interest — securing the service, preventing abuse, and keeping audit records;
• Legal obligation — retaining billing records where tax or accounting law requires it;
• Consent — anything optional we may add later, which you can withdraw at any time.

We share personal data only with the processors needed to run the service, under data-processing agreements:

• Polar — payment processing and tax handling as merchant of record;
• Resend — delivery of transactional email;
• Our hosting provider — the infrastructure the hosted control plane runs on.

Beyond that, we disclose data only if the law requires it. We do not sell personal data and have not done so in the preceding 12 months (a disclosure the CCPA requires us to make).

Dockstash sets only strictly necessary cookies:

• token — keeps you signed in to your account;
• lang — remembers your language choice.

There are no analytics, advertising, or cross-site tracking cookies, which is why you see no cookie-consent banner.

We keep account and project data for as long as your account is active. When you request account deletion, a 30-day grace period starts during which you can cancel the request; we warn you by email when the purge is 24 hours away. At the end of the grace period your account is deleted and the Restic repositories Dockstash manages for your projects are purged from your storage.

Two exceptions: billing records are retained as long as tax and accounting law requires, and data under a legal hold is retained until the hold is released.

Wherever you live, you can exercise these rights from within the app or by emailing us:

• Access and portability — export a machine-readable JSON copy of your account, projects, and plans from your account settings. Encrypted secrets are exported as ciphertext only.
• Rectification — correct your account details in settings at any time.
• Erasure — delete your account (see the retention section above for the grace period and purge).
• Objection and restriction — contact us to object to or restrict any processing based on legitimate interest.

If you are in the EU/EEA or UK you may also lodge a complaint with your supervisory authority. California residents have the right to know, access, and delete personal information, to opt out of its sale (we sell none), and to not be discriminated against for exercising those rights.

Secrets are encrypted at rest with AES-256-GCM, the SSH backup channel pins your storage host key, every Restic repository is encrypted with your key, and destructive restores require typed confirmation. The full picture is on our security page.

Your backup data stays wherever your storage VPS is — you choose the location. Control-plane data is processed where our infrastructure and processors operate; where that involves transfers out of the EU/EEA, our processors rely on Standard Contractual Clauses or an adequacy decision. The Business tier additionally offers a region-of-choice option for the control plane.

Dockstash is not directed at children and we do not knowingly collect personal data from anyone under 16. If you believe a child has created an account, contact us and we will delete it.

We will post any changes on this page and update the date above. For material changes we will email every account holder before the change takes effect.

Questions or requests about this policy: privacy@dockstash.com.