Legal

Rebetchi privacy policy

This privacy policy explains what information Sean As A Service, LLC, doing business as Rebetchi ("Rebetchi", "we", "us"), collects when you use our websites, Rebetchi Manage, the Rebetchi Play player portal and mobile app, and our game-server hosting services (together, the "service"), and how we use and protect it.

1. Who this policy covers

• Server owners — customers who purchase and manage hosted game servers.
• Players — people who join a hosted server's community through Rebetchi Play.
• Visitors — anyone browsing our websites.

2. Information we collect

Account information. When you create an account we collect your email address and authentication data. Accounts are managed through our authentication and database provider, Supabase.

Billing information. Payments are processed by Stripe. Your card details go directly to Stripe and never touch Rebetchi's systems. We receive and keep non-card billing records such as your subscription, invoices, payment status, and billing name and address. Charges appear on your statement as REBETCHI.

Game identities. If you choose to link a game platform identity (such as a Steam, Xbox, or PlayStation Network platform ID) to your Rebetchi Play profile, we store that platform identifier and the link to your profile. Linking always happens through an action you take — we do not link platform identities without your involvement.

Game and save data. To power features like server dashboards, character views, world maps, and in-game tools, we process the save-file and world data generated by the game servers we host. This can include in-game character names, platform identifiers, and gameplay state. Raw save data and backups are stored with our storage provider, Backblaze B2; derived data used by the apps is stored in Supabase.

Usage and log data. Like most services, we collect standard technical data — such as IP address, device and browser information, and logs of interactions with the service — to operate, secure, and troubleshoot it.

Support communications. If you contact support, we keep the correspondence.

3. How we use information

• To provide and operate the service: hosting your server, running backups, applying certified updates, and powering Rebetchi Manage and Rebetchi Play features.
• To process payments, manage subscriptions, and handle the payment-failure lifecycle described in our terms of service.
• To send transactional email (receipts, dunning notices, service notifications) through our email provider, Resend.
• To secure the service, prevent abuse, and enforce our acceptable use policy.
• To respond to support requests.
• To comply with legal obligations.

We do not sell your personal information.

4. Service providers

We share information only with the providers we use to run the service, and only as needed:

Our game-server nodes run in third-party datacenters, which also provide DDoS mitigation. We may also disclose information if required by law, or to protect the rights, safety, or property of Rebetchi, our customers, or others.

Profile pictures (Gravatar). To show a profile picture in the panel, your browser requests an image from Gravatar (operated by Automattic) using a one-way cryptographic hash of your email address. We never send Gravatar your email address itself, and Gravatar receives no other account information — but the request does tell Gravatar that someone with that email hash is using Rebetchi. If you would rather not have that request made, sign in with Google (we then use your Google profile picture instead) or ignore it and we will show your initials. No image is stored by us either way.

Signing in with Google. If you choose "Continue with Google", Google shares your email address, basic profile information, and profile picture with us so we can create or match your account. We do not receive your Google password, and we request no access to any other Google service or data. You can use email sign-in instead at any time.

5. Server owners and player data

When you join a server's community through Rebetchi Play, the server's owner can see community-facing information about you, such as your in-game character and presence on their server, through the player-management and community features. Server owners are responsible for how they run their communities; this policy covers what Rebetchi itself does with data.

6. Where data is stored

Our services and data are hosted in the United States. If you use the service from outside the United States, you understand that your information is transferred to and processed in the United States.

7. Retention and deletion

• We keep your information while your account is active and as needed to provide the service.
• When a subscription ends (including termination for non-payment), server data follows the retention schedule in our terms of service: a final backup is retained for 30 days after termination and then permanently purged. Routine automated backups age out on your plan's retention schedule (7, 14, or 30 days by tier).

7.1 Deleting your account (right to erasure)

You can delete your account yourself, in Rebetchi Manage under Account → Delete your account, or by contacting us at privacy@rebetchi.com. Either route runs the same process; deleting through the panel is immediate.

What you have to do first. We will not delete an account that would leave something running or something owed. You will be told which of these applies and how to clear it:

• A live subscription. Cancel it first. Cancelling and deleting are separate acts, and we will not stop a service you are still being billed for — or delete the customer record behind a subscription that is still charging you.
• A live server. Terminate it (or let a cancellation run its course) first. A running server holds an address and other players' data; shutting one down is its own process, with a final backup.
• A staff account. Contact us — we handle staff deletions as part of offboarding.

What we delete outright. Your profile and sign-in credentials, your community memberships, any game platform identity you linked, any outstanding character-link codes, your billing customer record, your subscription records with us, and any entitlements attached to your account. After this there is no account and no login, and nothing in our live systems identifies you — apart from the records set out below, which we keep deliberately and for the reasons stated.

What we keep, with you removed. A small set of records exists to keep the service safe and accountable, and the law lets us keep them for that purpose. We keep the record and remove the person:

• Activity log entries. We keep what happened to a server and when, and we permanently remove who did it. These are our security, abuse and dispute records.
• Invites you created. The invite code survives without your name on it. Deleting it would break links other admins are still handing out, and would free the code to be issued again to a different community — which is the outcome an invite code exists to prevent.
• Servers you owned. If you owned a server, its record stays, and everything you wrote is removed: the owner, the name, the branding, and any custom domain. Its public web address (for example yourworld.play.rebetchi.com) is kept and is never reissued to anyone else — releasing it would let a stranger claim the address your players still have saved. If you would rather it be released, ask us.
• Certification and node records (staff accounts only). The record of which software was certified, and which node credentials were issued, keeps the platform auditable; the name of the person who did it is removed.

Timeline. Everything above happens immediately, in one step, when you confirm. Copies that remain outside our live database are removed on their own existing schedules and in all cases within 30 days: server save data in backups is deleted no later than 30 days after a server is terminated (see section 7 and our terms of service), and routine operational logs age out inside the same window.

Your receipt. We give you a deletion reference when it completes. That reference is the only record of your deletion that we keep, and it is not derived from your account, your email, or anything else about you — so please keep it if you may want to ask us about the deletion later. Deliberately, we retain nothing that would let us look you up.

In-game data on other people's servers. If you played on a server someone else runs, that server's own save file contains your in-game character and your game platform ID. That data belongs to the server's owner, it lives in their world, and it is recreated from their save file every time we read it — so we cannot remove it without destroying their world data. What we do remove is the connection: once your account is deleted, nothing links that platform ID to a Rebetchi account. To have the in-game data itself removed, ask the server's owner.

Records we must keep by law. Payment and invoice records are held by Stripe, our payment processor, under its own retention schedule, because we are required to keep financial records for tax and accounting purposes. Our own copy of your subscription is deleted with your account.

We also keep our own record of the payment events Stripe sent us — the notifications that you checked out, that an invoice was paid, or that a payment failed. These records can include the email address and billing address you gave Stripe at checkout, and deleting your account does not remove them. We keep them because they are our financial and dispute records: Stripe keeps its own copy of an event for only 30 days, and a chargeback or billing dispute raised months later can be answered from this record or from nothing at all. They are not linked to any account once yours is deleted, they are never used to contact you or to rebuild a profile of you, and they are not reachable from Manage or from any public interface. If you want to know what these records contain in your case, or want them removed once no dispute window applies, contact us and we will handle it by hand.

7.2 Getting a copy of your data (right of access and portability)

You can download everything we hold about your account yourself, in Rebetchi Manage under Account → Download your data. It is one click, it is free, you can do it as many times as you need (see Limits below), and you do not have to tell us why. You can also ask us at privacy@rebetchi.com and we will send you the same file.

What you get. A zip file. Inside it:

• README.txt — a plain-text explanation of every other file, what deleting your account would do to each, and what is deliberately not included and why.
• manifest.json — a machine-readable index: the export date, your account id, a reference for the export, and for every file the records it holds, our own description of it, and the deletion outcome for it.
• inventory.json — the same tally Manage shows you before an account deletion. Both come from one count in our database, so if this file and that screen ever disagreed about what we hold, you would be able to see it.
• One JSON file per area, in folders: account/ (profile, sign-in record, and staff role if you have one), communities/ (communities you own with the servers behind them, communities you belong to, and invites you created), game/ (your linked in-game characters and your character-link codes), billing/ (customer record, subscriptions, add-ons — no card details, because those never reach us), activity/ (actions you took, your play sessions, and a summary of what we parsed from a world save for your character), and staff/ (certification and node records — empty unless you are Rebetchi staff).

Every area is always included, even when it is empty, as an empty list. That is so you can tell "Rebetchi holds nothing here" apart from "this was left out".

Format. UTF-8 JSON inside a standard zip. Any operating system can open it without extra software, any programming language can read it, and it satisfies the GDPR's requirement that portable data be structured, commonly used and machine-readable — while still being readable by a person.

Nothing in the file describes anybody but you. Owning a community does not make its members' data yours, so the export contains no roster, no other player's sessions, and no record of what anybody else did on your server. Credentials — server admin passwords, provisioning keys, node tokens, and live invite or character-link codes — are never exported either: they are not facts about you, and a file you might email to yourself is the wrong place for a working key. Where a value is withheld for one of these reasons, the file says so at that point rather than leaving a gap.

What is not in the file, and why. README.txt carries this list in full, generated from the same decision table the export is built from. In summary:

• Your world save files and backup archives. These are game save files rather than personal data, and the database row is only a pointer to storage. Download the actual bytes from Manage's Backups page.
• Your character on somebody else's server. If you play on a server another person runs, your in-game character lives in their save file and is recreated from it every time we read it. We cannot extract it without damaging their world; ask that server's owner. What we do hold and do include is the link between your account and your game platform id, your play sessions, and a count-and-date summary of what we parsed for your character.
• Actions somebody else took on a server of yours. Those are records of another person's activity, so they are that person's data, not yours.
• Invoices and receipts. Payments are processed by Stripe and your invoices live there under Stripe's own retention schedule. The export contains our operational copy of what you are subscribed to, not a financial record.
• The raw payment notifications Stripe sends us. These are described at the end of section 7.1 above. They are Stripe's own documents, stored as Stripe sent them and not linked to your account, so they cannot be collected automatically — ask us and we will look them up by hand.
• Machine measurements and internal queues. CPU, memory and FPS readings for a server, and the command queue the control plane uses to talk to a node, are measurements of a machine rather than data about a person. The fact that you asked for a restart is in your activity log.

Limits. Building an export reads every record we hold for you, so downloads are limited to three per hour. If you reach that limit Manage tells you how long to wait; nothing is wrong with your account. If your export is ever too large to send as a single download we will tell you so and get it to you another way — that is our constraint to solve, not a refusal.

We record that it happened. Each export writes one line to your activity log: that an export was made, when, and how many records were in each section of it. It contains no copy of the data itself, no email address, no IP address and no device information. We keep it because an export hands over a complete copy of your record, and if your account is ever compromised it is the only way to answer "was my data taken?". That line is treated exactly like every other activity-log entry if you later delete your account (section 7.1: the record stays, you are removed from it), and it appears in your next export.

8. Children

Rebetchi accounts are not available to children under 13, and we do not knowingly collect personal information from children under 13, consistent with the Children's Online Privacy Protection Act (COPPA). If you believe a child under 13 has created an account, contact us at privacy@rebetchi.com and we will delete it.

9. Security

We use reasonable technical and organizational safeguards to protect your information, including encryption in transit, access controls, and isolation between customer instances. No system is perfectly secure; if we learn of a breach affecting your personal information, we will notify you as required by law.

10. Your choices and rights

• You can view and update your account and billing information in Rebetchi Manage.
• You can unlink a game platform identity from your Rebetchi Play profile.
• You can delete your account and your personal data yourself, in Rebetchi Manage under Account. Section 7.1 sets out exactly what is deleted, what is kept without you attached to it, and why.
• You can download a copy of your personal data yourself, in Rebetchi Manage under Account. It is a zip file, in a structured and machine-readable format, and it is free. Section 7.2 sets out exactly what is in it and what is not. You can also request it by contacting us.
• Depending on where you live, you may have additional rights under applicable privacy laws; contact us to exercise them and we will respond as the law requires.
• We will not refuse, degrade, or charge differently for the service because you exercised a privacy right.

11. Changes to this policy

We may update this policy from time to time. For material changes we will give notice (for example by email or a notice in the panel) before the changes take effect.

12. Contact

Sean As A Service, LLC (dba Rebetchi)
6121 Heardsville Rd
Cumming, GA 30028
Email: privacy@rebetchi.com

Rebetchi is operated by Sean As A Service, LLC.