Privacy Policy

This policy explains what information Fus1onW3b (operated by Fus1on Studios) collects, how it's used, and who it's shared with. Fus1on Studios is based in Canada and this policy is written with that in mind.

• Account identity - your email address and account id, from your Fus1on Studios sign-in, plus your Discord username/id/avatar if you choose to link it.
• Site content - the files, code, and database content of the site(s) you host with us.
• Service credentials - SFTP and email mailbox passwords, stored encrypted at rest (AES-256-GCM), never in plain text.
• Usage & monitoring data - disk usage, uptime check results, and IP addresses in access/security logs.
• Billing information - handled entirely by Stripe; we never see or store your card details ourselves.
• Support communications - anything you send us via Contact, Support, or the bug tracker.

To provide and operate the Service (provisioning, billing, backups, monitoring), to communicate with you about your account or an issue you've reported, to maintain security (detecting abuse of shared infrastructure), and to comply with legal obligations.

Only what each provider needs to do its job:

• Fus1on Studios - the identity provider behind sign-in; they see your login, not your site content.
• Stripe - payment processing and billing.
• Cloudflare - routes traffic to your site and, if you use email hosting, inbound mail.
• Resend - relays outbound email sent from your mailbox.
• Discord - only if you choose to link an account, or use our public Discord channels (bug reports, changelog).

We don't sell your data. Note that most of this platform's infrastructure - your site's files, the database, mailboxes - runs on our own servers rather than a third-party cloud, so most of what you upload never leaves infrastructure we directly operate.

Site content and account data are retained for as long as your account is active. After deprovisioning, files are kept for a grace period (documented on the dashboard) before permanent deletion. Backups follow the same retention window as the site they belong to.

You can access, correct, or request deletion of your personal information at any time - export or delete your site's files directly from the dashboard, or contact us via Contact for anything the dashboard doesn't cover.

The Service isn't directed at children under 13, and we don't knowingly collect data from them.

Every tenant site runs in its own isolated container. Service credentials (SFTP, email) are encrypted at rest. We take reasonable measures to protect your data, but no system is perfectly secure - report any suspected vulnerability via Contact.

We may update this policy from time to time. Material changes will be reflected by an updated "Last updated" date above.

Questions about this policy? Reach us via Contact or, if you're signed in, Support.