What if your work breaks my site?

This is the fairest question to ask before letting anyone near your site, so here is the whole answer.

Before we change anything, we save a restore point. It happens the moment your site confirms our plugin can reach it — before any of our work begins — on every task, not only the risky ones.

A restore point holds:

• The content we might touch — your posts and pages as they were.
• The files that could not be downloaded again from anywhere else, such as your wp-config.php and your uploads list.
• A fingerprint of every plugin, theme and core file, so we can tell you exactly what changed.

It deliberately does not copy WordPress core, plugins or themes published on wordpress.org. Those are already available from their authors byte-for-byte, so copying them would spend your bandwidth duplicating something nobody can lose.

If something looks wrong afterwards, you can open your task and:

• See exactly what changed, file by file, compared to the restore point.
• Undo our changes.
• Put back individual pages you did not want altered, one at a time rather than all or nothing.
• Download the restore point itself, so you hold your own copy.

Two honest limits. Restoring files does not roll your database back, so anything written since — a new order, a new comment — stays. And we do not restore users, comments or orders, because someone asking for their About page back has not asked us to touch any of that.

The restore point is encrypted with a key unique to it, held for 30 days, and copied to a second machine so one failure cannot lose it. We ask you to approve deleting it once your task is done; if you never answer, it is deleted automatically when the 30 days are up.

We also check our own restore points regularly by opening them, because a backup nobody has ever opened is a promise rather than a fact.