Privacy Policy
Last updated: 6 November 2026
This policy explains what personal data BackendGen.dev uses, why, and your rights.
Who we are
BackendGen.dev is run by Michael Rowley, a sole trader based in the United Kingdom, who is the data controller for the information described here. We are registered with the UK Information Commissioner's Office (ICO), registration number ZC286075. You can contact us about anything in this policy at hello@backendgen.dev.
What we collect and why
| What | When | Why we use it | Lawful basis (UK GDPR) |
|---|---|---|---|
| Your email address and password (the password is stored only in a scrambled, hashed form) | You create an account | To sign you in and link your licence to you | Contract: providing your account and licence |
| Your name and, if you give it, your company or studio, and when you last signed in | You create an account (or from your Google account), or edit "Your details" | To know who we're talking to when you contact us, and to check it's really you if you're ever locked out of your email | Contract; our legitimate interest in keeping accounts secure |
| Your Google account's email address (and name) | You choose "Continue with Google" | To sign you in | Contract |
| Your licence: what you bought or claimed, when, the Paddle order number, and when you downloaded backends | You buy, claim a licence, or download | To let you generate, to support you, and to apply our refund policy | Contract; legal obligation (accounting records) |
| Saved projects: the generator settings you save (never passwords or keys) | You click Save in the generator | So you can come back to them | Contract |
| Your email address and Unity Asset Store invoice number(s) | You claim a free licence on your account page (Asset Store customers) | To confirm you bought Universal Backend Generator (and the Advanced Add-on, if you enter that invoice) and to set up your free web licence | Taking steps at your request before providing a licence to you |
| Your team or game name and, if you give it, your itch.io username or game page | You claim a game jam code on your account page | To set up your jam pass, and so we can find you if your game wins a prize we've offered for that jam. We don't share it with the jam or anyone else. | Contract: providing the pass (and any prize) |
| Your name, email address, your jam's name, page and dates, the number of entrants you expect and anything you add in the message | You ask for a code for your jam on the "For game jam organisers" page | To set up the jam's code, reply to you and give the winners their prizes. The form emails it to our inbox; it isn't stored on the site. | Taking steps at your request (setting up your jam's code) |
The passwords, keys and connection strings you type into the generators (for example an admin password, Stripe keys or your email server login) are sent over an encrypted connection only to build your download. They are not stored or logged, and they aren't kept in saved projects.
We use invoice numbers only to check your purchase against our own Asset Store sales records. We don't use them, or anything else we know from the Asset Store, for marketing. We don't send newsletters, we don't sell or rent your details, and we don't build advertising profiles.
Payments
Purchases are handled by Paddle.com, our reseller and the Merchant of Record. Paddle collects your payment details and billing address and is responsible for them under its own privacy policy. We never see your card details. Paddle tells us your email address, what you bought and the order number, so we can add the licence to your account.
Cookies and browser storage
This site doesn't use analytics or advertising trackers. When you sign in, your browser keeps your sign-in session, and the generators keep a draft of your settings (without passwords or keys), in your browser's local storage. These are needed for the site to work, so we don't ask for consent. The home and account pages load Paddle's script to show prices in your local currency (Paddle sees your IP address to work out your country), and Paddle's checkout may set its own cookies for payment and fraud prevention when you open it.
Who handles your data for us
- OVHcloud (OVH SAS, France): provides the server that runs this site, including sign-in, and stores accounts, licences, claims and saved projects, under OVHcloud's data processing terms.
- Resend (Plus Five Five, Inc., United States): sends our account emails (confirming your address, password resets) and delivers jam organisers' requests to our inbox, so it receives the email address and the email's contents.
- Paddle.com (United Kingdom): payments, as described above.
- Google: only if you choose to sign in with Google.
Where data goes outside the UK, it is protected by safeguards such as the UK International Data Transfer Addendum or the UK Extension to the EU–US Data Privacy Framework.
How long we keep it
- Accounts, licences and saved projects: while you have an account. You can delete your account yourself on your account page (or ask us to): your sign-in, saved projects, any Asset Store claim and any jam team name are deleted straight away. We keep your licence and order records for up to 6 years where UK accounting rules require it; ask us if you'd like them removed sooner and we'll delete whatever we're not required to keep.
- Asset Store claims: until your licence is set up (or the claim is turned down). After that we keep only your email, your licence and a note that your purchase was verified, for as long as you hold the licence.
- Jam organisers' requests: in our email while we arrange your jam, and for up to 12 months after it ends (so we can help with its prizes and any next edition). Ask us and we'll delete it sooner.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, or stop using it. Email hello@backendgen.dev from your account's email address and we'll reply within one month.
If you're unhappy with how we've handled your data, please tell us first. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk, or to your local data protection authority if you live in the EU.
Changes to this policy
We'll change the date above whenever we update this policy, and tell account holders by email about important changes.