Terms of Use

You give us a Hetzner Cloud API token. Using it, we ask Hetzner to create an image of one of your servers, create a temporary server from that image, boot it into Hetzner's rescue system, read its disk, and write a compressed copy of that disk to object storage. We then delete the temporary server and the image again and give you a time-limited link to download the file.

The copy is taken while your server keeps running. It is therefore consistent in the same way a disk is after a power cut. We do not modify the exported image in any way: what you download is what was on the disk.

You confirm that you are entitled to export the servers you select, and that doing so does not breach your agreement with Hetzner or the rights of anybody else. Hetzner offers only read-only and read-write tokens, and an export needs write access; you accept that you are granting us that access for the servers in the project the token belongs to.

The temporary server and the image we create are billed to your Hetzner account, not to us. These costs are small — typically a few cents per export — but they are yours. We delete both as soon as a run ends, including when it fails, and the export page names anything we could not delete so you can remove it yourself.

Hetzner limits the number of images per account and sells out of server types without warning. Where those limits stop an export, we stop and tell you rather than leaving something half-built.

Keep your login credentials to yourself and tell us at once if you believe somebody else has used them. You are responsible for what happens under your account.

You may disconnect a Hetzner token at any time, and you may delete your account at any time. Deleting your account deletes your stored tokens, your export records and any export file still in our storage. Disconnecting a token keeps the exports already made with it.

The Service is provided as is. We do not warrant that an export will complete at any given moment, that Hetzner will have capacity, or that a restored image will boot on a particular hypervisor without adjustment — restoring a machine onto foreign infrastructure normally needs network configuration and matching firmware, which the documentation explains.

An export is a copy, not a backup strategy. Verify that a copy boots before you rely on it. We are liable without limitation for damage arising from injury to life, body or health, and for damage caused intentionally or by gross negligence. For slight negligence we are liable only for breach of an essential contractual obligation, and then only up to the foreseeable damage typical for this kind of contract. Liability under the German Product Liability Act is unaffected.