Privacy

Who we are

This website is operated by WP Care Limited (“we”), Northside Enterprise Centre, Bunratty Drive, Coolock, Dublin 13, Ireland. AX Plugins is a product line of that company. For anything on this page, we are the data controller. You can reach us at [email protected].

Cookies and analytics

This site runs no analytics, no tag manager, no advertising or tracking scripts, and no social media embeds. Nothing on these pages profiles you or follows you to another site, and nothing you do here is measured.

If you are not signed in, this site sets no cookies at all. The only cookies it sets are the ones WordPress needs to sign you in to your account and keep you signed in — principally one named wordpress_logged_in_…, alongside a short-lived cookie the sign-in form uses to check that your browser accepts cookies at all. They carry an identifier for your account and a verification token, not your password. Signing in keeps you signed in for two days, or two weeks if you tick “keep me signed in”. Signing out deletes them.

Those cookies are strictly necessary to provide the account area you asked for, and the ePrivacy rules exempt cookies of that kind from consent. That is why there is still no cookie banner here: there is no cookie on this site that we would be asking you to consent to.

Fonts are served from this site's own server. No request is made to Google Fonts or any other third party when you load a page here, so no third party learns that you visited.

Server logs

Our web host keeps standard server logs of requests to this site. A log entry can include your IP address, the time of the request, the page requested, the referring page and your browser's user-agent string. We use these only to keep the site running and secure — diagnosing errors and identifying abuse.

The lawful basis is our legitimate interest in operating a secure website (Article 6(1)(f) GDPR). Logs are held for a short period by the host and are not used to build any profile of you, are not combined with other data, and are not sold or shared for marketing.

Your account and your licences

Every plugin on this site is downloaded from an account, the free ones included — there is no public download link. If you license a plugin from us we set up an account for you at axplugins.com/account/, where you can see the plugins you are licensed for and download the current version of each; ask us and we will set one up for a free plugin too. You cannot register yourself, and that is the point: the login exists so the downloads are not open to every bot on the internet, which is also why we hold no more than we do.

The account holds your name, your email address, your company name if you give us one, and a password stored only as a cryptographic hash — we cannot read it, and neither can anyone who obtained the database. Alongside it we keep a record of each licence: which plugin it is for, when it was issued, when it runs to, whether it is current, and a short internal note telling us which site and which invoice it belongs to.

The lawful basis is performance of our contract with you (Article 6(1)(b) GDPR): we cannot supply a licensed plugin, or let you download it, without a record of who holds the licence. All of it is stored in this site's own database on our web host. No third party is involved, and none of it is used for marketing or shared with anyone.

Downloading a plugin from your account is not logged against you.

We keep an account and its licence records for as long as any licence on it is current, and for six years afterwards, because a licence is a transaction we are required to be able to evidence for tax purposes. Ask us to close your account and we will delete it, keeping only what that obligation requires.

Update checks from your site

Each AX plugin asks this site, about twice a day, whether there is a new version. One request covers every AX plugin on a site. It carries the site’s address, its WordPress and PHP versions, the environment type WordPress reports (production, staging and so on), and each AX plugin’s name and version, with its licence key where one has been entered. It carries nothing from the site’s content, its users or its visitors.

We keep a record of the site’s address, each plugin and its version, the environment, the licence used, and when the site first and last checked. We use it to give updates to the sites a licence covers, to count a licence’s sites, and to know which sites run which version when a fix has to reach them. It is deleted when a site has not checked for twelve months. The address a check came from is not kept with it; to stop abuse it is counted for up to an hour and then discarded, apart from the server logs described above.

Most of these sites belong to businesses, and a business website’s address is rarely personal data. Where it is — a site in a person’s own name — the lawful basis is our legitimate interest in delivering updates and security fixes to the plugin installed there (Article 6(1)(f) GDPR). The check can be switched off by adding AX_UPDATES_DISABLE to the site’s wp-config.php; the plugin keeps working, and new versions are then installed by hand.

If you email us

If you write to us we hold your message, your email address and anything else you include, so that we can answer you and keep a record of the correspondence. The lawful basis is our legitimate interest in responding to an enquiry, or performance of a contract where you are a customer (Article 6(1)(b) or (f) GDPR).

Support email is handled through the WP Care support inbox on Google Workspace, so a message you send is stored on Google's servers as our processor. We keep support correspondence while it is useful for supporting the site in question, and routinely for no more than three years after the last contact.

Buying a licence

There is no checkout on this site. A plugin licence is billed on the invoice that carries your WP Care plan, and the personal and billing data involved is handled under the WP Care privacy notice rather than this one. This site plays no part in a payment and never sees card details.

The Billing page in your account holds no payment details either. It tells you where your licences are invoiced, and nothing more.

Who else sees your data

We do not sell your data and we do not share it for marketing. The only third parties involved are the suppliers who make the service work:

• Our web host, which stores the site files and keeps the server logs described above.
• Cloudflare, which sits in front of this site to protect it and speed it up, and so handles every request to it, update checks included.
• Google (Workspace), which hosts the support mailbox.

All three act on our instructions as processors. Where a supplier processes data outside the European Economic Area, that transfer relies on the European Commission's standard contractual clauses or an adequacy decision.

Your rights

Under the GDPR you have the right to ask us for a copy of the personal data we hold about you, to have it corrected or erased, to restrict or object to how we use it, and to receive it in a portable form. Where we rely on legitimate interests you can object, and we will stop unless we have a compelling reason not to.

Write to [email protected] and we will respond within one month. If you are not satisfied you can complain to the Irish Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28 — dataprotection.ie.

Changes to this page

If we change how this site handles data — for example by adding analytics — we will update this page and change the date at the top before the change goes live.

Contact

WP Care Limited, Northside Enterprise Centre, Bunratty Drive, Coolock, Dublin 13, Ireland.
[email protected]