Your users are your life. Your source code is an implementation detail. :-) Most Web 2.0-ish startups aren't doing a lot of really tricky stuff behind the sc

Your users are your life. Your source code is an implementation detail. :-) Most Web 2.0-ish startups aren't doing a lot of really tricky stuff behind the scenes (i.e. you can kind of guess what the implementation is like most of the time anyway) and most commercial competitors aren't going to be dumb enough to risk the legal implecations of stealing your code. The chances of you losing your work because you didn't have an off-site backup are infinitely higher than you losing it because a competitor steals it and uses it against you. That said, since I already had a VCS set up here, and have a little of The Paranoia too, we use a local server for version control and then do a GPG encrypted backup offsite.