Security & your data
Effective date: September 29, 2026
This page explains, in plain terms, where your data is kept, how it is protected, and how to be ready for a competition day. CubeManager is in beta: this page describes how it works today, and is updated when that changes.
Where your data is
- The application, its database and uploaded files run on servers in France, hosted by OVH.
- Emails are sent through Amazon SES, from its Paris region.
- Our domain name is managed by Cloudflare.
- Every provider, and what it processes, is listed in the Privacy Policy.
How accounts are protected
- Every connection uses HTTPS.
- Passwords are stored only as a one-way hash, never in readable form.
- You can turn on two-factor authentication, with an authenticator app or a code by email, and lock your session with a PIN.
- We email you when your account is signed in from a new browser, with a link to report it if it was not you.
- The secrets used for two-factor authentication are encrypted in the database.
How data is protected
- Screenshots attached to feedback are stored privately, with no public link.
- Scrambles are visible only to a competition's own staff until they are used, and every access is recorded.
- Administrator access is limited to the CubeManager team, and every administrative action is recorded in an audit log.
Backups
- The database and uploaded files are backed up every night.
- Each backup is encrypted before it is written to disk, and kept for 30 days.
- Backups are currently stored on the server itself; a copy in a second location is being set up.
Your data, your choice
- Download a complete copy of your data at any time from Settings → Legal → Download my data.
- Delete your account yourself from Settings → Account. Results of published competitions stay in the sporting record, without the link to you.
- If CubeManager ever closes, every account will be told at least 60 days in advance, with time to export — see the Terms of Service.
Getting ready for a competition day
CubeManager is an online service, and any online service can be interrupted. Before a competition, keep what you need to carry on without it:
- Export the registration list (CSV) the day before.
- Print the scramble sheets and the score sheets for each round.
- Download each round's results (PDF) as it finishes, and export all results (CSV) at the end.
- If the site is unavailable, keep scoring on the paper score sheets and enter the results once it is back.
Reporting a problem
To report a bug, use the feedback button in the app. To report a security issue, use the contact form with "Security" in the subject; security reports are answered first.
Independence
CubeManager is not affiliated with, endorsed by or operated by the World Cube Association (WCA). Who operates it is stated in the Legal Notice.