Service information
Privacy policy
Last updated October 18, 2026
Kubikon’s business location and final launch details are awaiting confirmation. Refund requests follow Creem’s Buyer Terms and applicable consumer rights. These pages do not introduce an automatic vault-deletion deadline.
Checkout currently uses Creem TEST mode; live billing is disabled.
This notice explains how Kubikon handles information used to provide CloudWarden hosting and billing, and distinguishes it from encrypted vault contents.
Information the service handles
- Hosting-account information, including your name, email address, hashed account password and account/session records.
- Billing references and subscription, payment, refund and dispute status needed to manage hosting. Payment details entered at checkout are handled by Creem.
- Instance addresses, resource identifiers, usage counters and operational or security information such as request/network context and device information.
- Encrypted vault items, wrapped vault key material and attachment payloads, together with vault account and operational metadata. An authorized compatible client encrypts vault contents before upload.
Encryption and the hosting trust boundary
Encryption of vault contents does not hide your hosting-account identity, instance address or service activity. Operators administer the infrastructure, can handle stored ciphertext and metadata, and provide the hosted web-client code. This notice does not claim that hosting eliminates every trust relationship.
Your vault master password and unwrapped vault encryption keys should stay in your trusted client. Support does not need them. Optional instance backups can include readable account and security data, including authentication verifiers and configured two-factor credentials, alongside encrypted vault records. Protect archive files and download links.
Purposes and service providers
We use information to authenticate accounts, provision and maintain instances, reconcile billing, communicate about the service, respond to requests and protect against abuse.
Cloudflare supplies infrastructure, storage, routing and transactional email. Creem supplies checkout and billing as merchant of record. Processing can occur outside your country under the relevant provider arrangements; this service does not currently promise a particular data-residency region.
When used by a supported client, mobile push can send device identifiers, push tokens and change metadata through Bitwarden’s push services. Website-icon lookups can disclose requested domain names to favicon.im or icons.bitwarden.net. These features involve their respective providers, even when stored vault contents are encrypted.
Cloudflare privacy policyCreem privacy policyBitwarden privacy policy
Cookies and records
The hosting application uses cookies and session records for authentication and security, and a cookie to remember your light/dark preference. Infrastructure and payment providers may use their own security or checkout cookies.
We do not add advertising trackers to the hosting storefront. The service and its providers still process operational and security information; we do not promise that no records exist.
Retention, access and deletion requests
Canceling hosting is separate from deleting an account or instance. Suspension does not immediately erase the instance, but normal trash, expired-Send and configured backup cleanup still apply. This draft does not promise indefinite storage or a fixed post-cancellation deletion deadline.
Vault account deletion does not by itself erase the hosting/billing account or existing backups. Hosting-account and complete hosted-instance deletion are not currently self-service actions. Contact the operator to discuss access, correction, export or deletion; identity verification may be needed.
Applicable consumer and privacy rights remain in force. Provider billing records may be subject to separate legal retention requirements. Kubikon handles CloudWarden service and privacy requests through the contact address on our Contact page.