Privacy Policy

We collect only what the service actually needs to run:

• •Account information — the email address and optional display name you register with, and a password. Your password is never stored in plain text; we store a salted, one-way hash of it.
• •Download and entitlement history — which plugins you’ve claimed or purchased, so they can appear on your account page. Each download event also records the IP address and timestamp, kept for security and abuse-prevention purposes.
• •Cookies — a session cookie (httpOnly, not readable by page scripts) that keeps you signed in, and a CSRF token cookie that protects account actions from cross-site request forgery. Both are strictly functional. A referral cookie is also set if you arrive through an affiliate link, so the referrer can be credited.
• •Analytics — we use Google Analytics to understand which pages people visit and how the site performs. It sets its own cookies and shares your IP address and page-view activity with Google. We do not use it for advertising, remarketing, or conversion tracking. You can opt out with Google’s browser add-on, or by blocking analytics cookies in your browser.
• •Site analytics of our own — we also count page views ourselves, on our own servers, because ad blockers hide a large share of Google Analytics traffic and we would otherwise have a badly incomplete picture. This uses no cookies. To count visitors without identifying anyone, we store a one-way hash of your IP address and browser combined with a secret that changes every 24 hours; the hash cannot be reversed, and the same visitor produces a different hash the next day, so it cannot be used to follow you over time or link your visits together. We record the page address you viewed and the site you arrived from — the site name only, never the full link, which can contain search terms.
• •Support messages — when you contact support, we store what you write, the name and email address you give, and any reply we send, so the conversation has a record and can be picked up again later. This is kept whether or not you have an account.
• •Community and beta discussion posts — threads and replies you write are stored with your account and shown, with your display name, to other signed-in members of that board. They are not public to the open internet, and search engines do not index them. If you delete your account your posts remain, but your name is removed from them and they show as written by a member.
• •Moderation records — if we suspend or restrict your access to the community, we store that decision, when it was made, and the reason. You can request a copy of it like any other data we hold about you.

We use the information above to:

• •create and secure your account, and keep you signed in between visits;
• •verify your email address and let you reset a forgotten password;
• •show you the plugins you’re entitled to and let you download them;
• •investigate abuse, fraud, or security incidents; and
• •respond when you contact us for support.

We keep your account information for as long as your account is active. If you ask us to delete your account, we’ll remove or anonymize your personal information within a reasonable period, except where we’re required to retain certain records (for example, security or audit logs) for a longer period.

Two things are worth being specific about. Community and beta posts are not deleted with your account — a discussion is written by several people, and removing one side of it would break the thread for everyone else. Instead your name is detached from your posts, which then show as written by a member. Purchase and download records are kept for as long as we need them for accounting and to honour your licences.