BackupYourSite

BackupYourSite is a WordPress backup plugin that backs up your files and database on a

schedule, stores the archives on your own server, and restores them again from the WordPress

admin in one click. An optional cloud destination adds a verified offsite copy when you want

one — everything else works with no account at all.

It is built for cheap, limited hosting. The backup runs in small steps rather than one long

request, so a short PHP time limit or a small memory limit slows it down instead of breaking

it. If a step is killed, the next one carries on from where it stopped.

Core backup features

• Daily, weekly or manual scheduled backups of files and database.

• A real database dump written by PHP — no mysqldump, no shell access needed.

• Archives split into size-limited zip volumes so nothing has to be handled in one piece.

• Incremental backups measured against the last full backup, so restoring never needs more

than two backups.

• Every backup is verified before it counts: the archives are integrity-checked, the

database dump must end with its completion marker, and every file the plugin promised to

archive must actually be in the archive. A backup that does not pass is marked incomplete,

and old backups are never deleted after a run that was not clean.

• One-click restore of files, database, or both — with a snapshot of the current site taken

first.

• One retention setting: delete backups older than N days. The most recent working backup is

never deleted, and nothing is ever deleted after a backup that did not finish cleanly.

• Failure emails if a scheduled backup does not complete.

Optional: offsite cloud backup

Backups kept on the same server share that server’s fate. If you want an offsite copy, you

can connect a BackupYourSite account on the Account screen and add “Cloud” as a destination.

This is entirely optional — every feature above works without an account, and the plugin

makes no connection to our service until you paste a connection code yourself.

php is never included in an archive that is uploaded to a cloud destination,

so your WordPress authentication keys, salts and database credentials stay on your own server.

See “External Services” and the FAQ below for exactly what is sent and when.

What it does not do

• It cannot restore a site that no longer runs. This plugin lives inside WordPress; if

WordPress cannot start — a white screen, a fatal error, a database connection error, a

suspended account — the plugin cannot start either. For that case, download the archive

from the Backups screen and restore it through your hosting control panel.

• Backups stored on this server share this server’s fate. They protect you from mistakes,

bad updates and corruption. They do not protect you from losing the server.

• Multisite is not supported yet.

Who this is for

Anyone who wants scheduled WordPress backups and a real one-click restore without shell

access or a mysqldump -capable host: small business sites, agencies managing client sites on

budget hosting, and anyone planning to migrate a WordPress site and wanting a verified,

restorable copy of it first.

External Services

This plugin works completely on its own and makes no outbound connection by default. No

account is required, and nothing leaves your server unless you deliberately connect one.

Requests to your own site (always, no account needed)

• A short request back to this site’s own admin-ajax.php to continue a running backup.

• A request to this site’s own backup folder to test whether the web server would let a

stranger download your backups.

Both of these stay on your own server and are not an external service.

BackupYourSite cloud storage (optional, off until you connect it)

If — and only if — you create a BackupYourSite account and paste a connection code into the

plugin’s Account screen, the plugin talks to the BackupYourSite backup service at

com, operated by BackupYourSite.

What is sent, and when:

• When you press Connect: the connection code you pasted, this site’s home URL, this

site’s name, and the plugin version. The service returns a token scoped to this site only.

• When a backup runs with “Cloud” selected as a destination: the backup archives

themselves are uploaded in parts. Those archives contain your site files and a full copy of

your database, which includes user accounts, email addresses, orders, comments and any other

personal data your site stores. A SHA-256 checksum and the archive file names and sizes are

sent with each part. php and the other site configuration files listed in the

FAQ below are deliberately left out of any archive that goes to a cloud destination, so your

WordPress authentication keys and salts are never uploaded.

• When you open the Account screen or press Refresh: a request asking for your plan name

and storage quota. The service records this as a liveness ping.

• When you restore from a cloud backup: a request for a time-limited download URL, then

the download of the archive volumes.

• When you delete a cloud backup or disconnect the site: the backup set identifier, or a

disconnect request for this site’s token.

Nothing is sent before you connect. No usage statistics, telemetry or analytics are ever

sent, connected or not. Your account password is never asked for and never stored.

com/terms/

com/privacy/