Privacy policy

01 / Information we handle

• Accounts: your name, email address, hashed password, and sign-in/session information.
• Licenses: the product and plan you select, your site name or domain, the website associated with a license, license keys, activation status, and subscription references. Plugins send license and website details when validating a license.
• Payments: Stripe processes your payment details. PluginBank keeps billing and subscription references, payment-method summaries where supplied by Stripe, and transaction/status information, not your full card number or security code.
• Support: the name, email, subject, and message you submit, plus our correspondence. Please do not include passwords, full payment details, or license keys in messages.
• Backup alerts: when you enable BackupBank’s API monitoring or email alerts, we receive the licensed domain, monitoring preferences, schedule, event identifiers, backup success/failure status, and timestamps. These status reports do not include your backup archive contents.
• Essential technical information: our application and infrastructure may process IP addresses, browser/device information, request details, and error or security logs to deliver pages, maintain sessions, prevent abuse, and diagnose problems. These are operational records, not behavioral advertising profiles.

02 / Essential cookies, not tracking cookies

We use essential session and security cookies to keep you signed in, protect forms against forgery, and remember the state of a request. We do not use analytics or advertising cookies. Blocking essential cookies may prevent sign-in, checkout, or forms from working.

03 / Services that help us operate

We use hosting, database, and email providers to operate PluginBank and send service messages. Information is shared as needed to provide those functions. In addition:

• Stripe handles checkout and billing management. See Stripe’s privacy policy.
• Cloudflare Turnstile protects our contact form against spam. The security check processes technical browser information, and we send your IP address when verifying it. See Cloudflare’s privacy policy.
• Google Fonts serves the typefaces used on our website. Your browser connects to Google to load them, which exposes technical request information such as your IP address. See Google Fonts’ privacy information.

These providers may process information in countries other than your own, subject to their applicable privacy terms and legal safeguards. We may also disclose information where required by law or necessary to protect legal rights and the security of the service.

04 / What we use information for

We use information to provide accounts and licenses, process subscriptions, validate plugin access, deliver requested alerts, answer support requests, prevent fraud and abuse, and meet legal and accounting duties. Contacting support does not subscribe you to marketing.

Where data-protection law requires a legal basis, we rely on performing our agreement with you, legal obligations, and our legitimate interests in keeping the service secure and reliable. Where consent is required for a particular use, we will ask for it.

05 / Security & retention

We use reasonable technical and organizational measures to protect information, including password hashing and access controls. No internet service or storage system can guarantee absolute security.

We retain information for as long as needed to provide the service, resolve support or billing issues, maintain security, and meet legal requirements. Some billing or legal records must be kept after an account closes. Deleted information may remain in backups until those backups are replaced under the applicable backup cycle.

06 / Your choices & rights

You can request access, correction, export, or deletion of your personal information through our contact form. Depending on your location, you may also have rights to object to or restrict processing, withdraw consent where applicable, and complain to your local data-protection authority. We may need to verify your identity before completing a request.

Some requests are subject to legal exceptions, such as retaining tax records. Canceling a subscription does not automatically delete your account or its records; deleting an account is not a substitute for canceling a paid subscription.

07 / Scope & changes

This policy covers the PluginBank website, accounts, licensing API, and related services we operate. Data stored on your own WordPress website or with storage services you choose is also subject to your configuration and those services’ policies. Linked third-party websites have their own policies.

If our practices change, we will update this page and its date. Where required, we will give additional notice or request consent before a new use of your information.