Privacy Policy

How we collect, use, and protect information on WPfavs

Last updated: August 29, 2026

This Privacy Policy explains how WPfavs (“we”, “us”) collects, uses, and shares information when you use wpfavs.com, our plugin directory, lists, API, and related services (the “Service”). Questions can be sent to [email protected].

1. Who this policy covers

It applies to visitors, account holders, API users, newsletter subscribers, and affiliates. It does not cover third-party plugin authors, WordPress.org, Envato / CodeCanyon, payment processors, or other sites we link to. Those services have their own policies.

2. Information we collect

We may collect:

Account data — name, email, password (stored hashed), profile photo, and login type (email, Google, Facebook, or GitHub)
Service data — WPfavs lists, bookmarks, plugins you add, API keys, affiliate IDs, and Envato / CodeCanyon connection tokens
Billing data — subscription status, Stripe customer ID, invoices, and limited card metadata. Full card numbers are handled by Stripe, not stored on our servers
Usage data — pages viewed, search queries, referral links, device and browser type, IP address, and approximate location
Communications — messages you send us and newsletter sign-ups

3. How we collect it

You provide most of this when you register, edit your profile, create lists, subscribe, or contact us. We also collect data automatically through cookies, logs, and analytics. Social login providers send us the name, email, and profile details you authorize. If you arrive through an affiliate link, we store a referral cookie.

4. How we use information

We use information to:

Create and maintain your account and lists
Authenticate you and protect the Service from abuse
Process subscriptions, invoices, and affiliate payouts
Provide the API and rate-limit keys
Send product, security, and (if you opt in) newsletter emails
Improve search, directory quality, and site performance
Comply with law and enforce our Terms

5. Cookies and similar technologies

We use cookies and similar storage for sign-in, preferences, affiliate attribution (typically 30 days), and analytics. You can block cookies in your browser, but some features (such as staying logged in) will not work. We may use Google Tag Manager and similar tools to understand how the site is used.

6. When we share information

We do not sell your personal information. We may share it with:

Service providers — hosting, email, analytics, and Stripe for payments
Social and marketplace partners — Google, Facebook, GitHub, or Envato when you connect those accounts
The public — lists, usernames, and other content you choose to make public
Legal and safety — when required by law or to protect users and the Service
Business transfers — if WPfavs is merged or sold, information may transfer with it

7. Public content

Public WPfavs lists, plugin notes, and profile details you publish can be seen by anyone and may be indexed by search engines. Do not put secrets or private site credentials in public lists.

8. How long we keep data

We keep account and list data while your account is active. Billing records are kept as long as tax and accounting rules require. Logs and analytics are kept for a limited period. When you delete your account, we remove or anonymize personal data unless we must keep it for legal reasons.

9. Security

We use access controls, encrypted connections, and hashed passwords. Keep your password and API key private. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Your choices and rights

You can update your name, email, photo, and password from your profile. You can disconnect social login, refresh or revoke an API key, and cancel a subscription there as well. Depending on where you live, you may have rights to access, correct, delete, or export your data, or to object to certain processing. Email [email protected] to make a request. You can also unsubscribe from marketing emails using the link in those messages.

11. Children

The Service is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has given us data, contact us and we will delete it.

12. International users

WPfavs may process information on servers outside your country. By using the Service you understand that your information may be transferred to those locations. Where required, we use appropriate safeguards for those transfers.

13. Third-party plugins and installs

Installing a plugin on your WordPress site is your decision. Those plugins may collect data from your sites and visitors under their own terms. WPfavs is not responsible for third-party plugin privacy practices.

14. Changes

We may update this Privacy Policy. The “Last updated” date will change when we do. Continued use after an update means you accept the revised policy. We will try to highlight material changes on the site or by email.

15. Contact

WPfavs
Email: [email protected]
Website: https://wpfavs.com