Backup, restore, export, delete

Each action asks you to confirm your password and authenticator code first. Nothing is ever sent off this server automatically.

Download encrypted backup

The archive is encrypted with the passphrase you type here (Argon2id + AES-256-GCM). It contains the database, evidence files and data keys, so it is readable with the passphrase alone — the server key is not needed to restore, and the server key alone cannot open it. If you forget the passphrase, that archive is unrecoverable.

Verify a backup file

Checks every chunk's authentication tag and every member's hash. Writes nothing.

Export (plain)

A zip with profile.json (all decrypted records, provenance, latest findings), the evidence files, and an index. Unencrypted: protect the file yourself.

Restore from backup

Replaces the live dataset with the archive's contents after verification. The current data is moved to a pre-restore snapshot, not deleted. All sessions are signed out afterwards.

Delete this profile

Deletes every row and evidence file in this profile, then VACUUMs the database and verifies. Backups you downloaded earlier still contain the data; the deletion record lists them. Server-side pre-restore/pre-migration snapshots may also contain it.