Browsing the site
The website itself keeps nothing.
This website is a static site — a handful of files served to your browser. On its own it contains:
No cookiesNo advertising or analytics cookies are set. The only cookie is your own sign-in session, which you create by registering
No analytics or trackingNo Google Analytics, no pixels, no fingerprinting, no third-party scripts — except Stripe's, and only when you open the checkout
No newsletter, everYour email is never added to a mailing list, never shared, never sold — we send nothing marketing-related
Easily verifiablePress F12 → Network and Storage tabs — you'll see no trackers, and no cookies unless you signed in
Accounts
Accounts are optional — and minimal.
You can register so your license keys live in one permanent place instead of relying on a single confirmation screen. If you register, we store exactly four things:
Username3–20 characters, shown on your account page
Email addressUsed only so support can identify you — never contacted for marketing
PasswordStored as a salted, peppered hash — never in plain text, and not reversible by anyone holding the database alone
Creation dateWhen the account was made
There is no password reset email — we deliberately send nothing. If you lose access, contact support and we'll verify you and reset it manually.
Payments
Stripe handles every purchase.
When you buy a plugin, you enter your details on Stripe's checkout — a PCI DSS Level 1 certified payment processor used by millions of businesses. Your card number, expiry and CVC are typed directly into Stripe's interface and never touch our website or any server of ours.
What we see after a purchase: the amount, the date, and the email address you entered — only what's needed to confirm you paid and to match the purchase to your account. That's it.
Stripe's own compliance certifications (PCI DSS, SOC 2): stripe.com/compliance
License activation
What the plugins send us.
Our paid plugins use online activation to limit how many machines a single key can run on. When you activate, the server stores:
A machine fingerprintA hash built from your computer and user name. It identifies a machine, not you personally
Device nameThe browser/user-agent string sent during activation
DatesWhen it was activated, and the last successful check-in
Purpose is one thing only: enforcing the seat count on your key. Deactivating a machine — or deleting your account — removes it.
Hosting & updates
Servers and update checks.
Hosting (Cloudflare)This site is served by Cloudflare, which processes standard connection logs (IP address, time, requested file) as any web server must. We do not access, combine or analyze these logs, and Cloudflare processes them under its own privacy policy
Plugin update checksOur plugins fetch a single public file (update.json) to check version numbers. That request contains no personal data — no account, no machine ID, no analytics
If any of the above ever changes, this page will be updated and dated below — you will never be quietly opted into data collection.