Last updated: 25 August 2026
This explains what personal data WPMints ("we", "us"), operating out of England, United Kingdom, collects when you buy or manage a plugin subscription, and why. We collect the minimum needed to sell you a license, deliver your license key, and keep the site running. You can reach us via our contact form.
| Data | Why | Where it's stored |
|---|---|---|
| Email address | To deliver your license key and send billing/subscription emails | Supabase (our database), Stripe, Resend (our email sender) |
| Payment details | To process your subscription | Stripe only — we never receive or store your full card number |
| License key & purchase history | To validate your plugin's Pro features and let you manage your subscription | Supabase |
| IP address (temporarily) | To rate-limit login attempts and prevent abuse on this site | Supabase, auto-deleted after 24 hours |
| Your site's URL (home address) | Sent by the plugin when you activate a license, so you can recognise and self-deactivate your own sites from the subscription management page | Supabase, tied to your license |
| Anonymous usage check-in | Each installed plugin periodically reports its version, your WordPress version, and whether it's on Free or Pro, plus a one-way, non-reversible hash of your site's address (not the address itself) — used only in aggregate to guide which WordPress/plugin versions to keep supporting | Supabase, not linked to your name, email, or license |
This site doesn't use tracking cookies. It stores a small access token in your browser's local storage only if you unlock a password-gated preview — this is used purely to remember that you've unlocked it, and isn't shared with anyone.
Each of these processes data under their own privacy policy; we only send them what's needed for the purpose above.
We don't sell your data, run ad trackers, or share your email with anyone outside the providers listed above.
You can ask us to see, correct, or delete the personal data we hold about you at any time via our contact form. Note that deleting your data associated with an active subscription may also end your ability to use the plugin's Pro features.
We keep license and purchase records for as long as your account is active plus a reasonable period afterward for accounting purposes. Failed-login rate-limit records are deleted automatically after 24 hours.
WPMints is a business tool for WordPress site operators and isn't directed at children. We don't knowingly collect data from anyone under 16.
We may update this policy occasionally. Material changes will be reflected in the "Last updated" date above.
Questions about this policy or your data: get in touch.