Privacy Policy

The short version

• The plugin runs entirely on your WordPress infrastructure. Your content, database, media, and credentials never touch our servers.
• On our website, we collect basic aggregated analytics to understand traffic.
• If you buy a paid license, checkout, billing, license keys, and update delivery are handled by Freemius. We see a subset of that data (name, email, license status) so we can support you.
• Our free-download endpoint keeps a short-lived log to prevent abuse. It isn't tied to your identity.
• Emails you send to support are kept so we can help you.
• We don't sell your data. We don't run ads. We don't profile you.

Data we do not collect

We want to be explicit about this, because it's the whole point of the plugin's architecture.

We do not receive, store, or process:

• Your WordPress content — posts, pages, media, custom fields, meta, taxonomies, or any other site data. Syncs run directly between your staging and production sites over your own network.
• Your WordPress database contents.
• Your WordPress admin usernames, passwords, or user accounts.
• Your HMAC shared secret. It's generated and stored only on your two sites.
• The URLs, IPs, or credentials of your staging or production servers (beyond what you may voluntarily share when contacting support).

If our servers vanished tomorrow, your ability to sync between your own sites would be unaffected until you needed a plugin update.

Data we collect

Website analytics (ezpagesync.com)

We use Googly Analytics, a privacy-respecting website analytics service, to understand how our marketing site is used.

• What it collects: aggregated visit data — pages viewed, referring site, approximate location derived from IP country, and browser/OS information.
• Why: to understand which pages are useful, fix broken links, and improve the site.
• Retention: governed by the vendor's policy.
• Third parties: the analytics vendor is a processor. See their privacy policy for details.

Paid licenses via Freemius

Paid tiers (Freelancer, Agency, Unlimited) are sold and fulfilled byFreemius, a third-party e-commerce and licensing platform for WordPress plugins.

• What Freemius collects at checkout: your name, email, billing address, payment details (handled by their PCI-compliant payment processor), and IP address.
• What Freemius collects from the plugin after activation: telemetry from your installation, including site URL, WordPress version, PHP version, plugin version, and activation/deactivation events. This telemetry is used to deliver license validation and updates.
• What we see: through the Freemius seller dashboard, we receive a subset of this data — enough to identify our paying customers, deliver support, and honor license terms (for example, seeing which sites are activated against a license).
• Roles: Freemius is the data controller for payment data. For customer-relationship data (your license status, support history, plugin telemetry linked to your license), Freemius and we act as joint controllers.
• More info: see the Freemius Privacy Policy for their full disclosure, including their subprocessors and international transfer mechanisms.

Free-tier download logs

The free plugin is distributed through a token-gated PHP flow on our site. Each download attempt is logged to a private audit file on our server.

• What we log: timestamp, requested file identifier, and a hashed representation of the requester's IP address used for rate limiting.
• Why: to prevent abuse of the download endpoint (mass scraping, brute-force token guessing).
• Retention: approximately 30 days, then discarded.
• Identity: the hashed IP is not linked to a name, email, or account. There is no free-tier account.
• Third parties: none. The log lives on our own hosting.

Support inbox

If you email , we receive and retain those emails.

• What we collect: whatever you send us — typically your email address, name (if provided), and the contents of your message, which may include site URLs or configuration snippets you paste in.
• Why: to help you, and to keep a record of past issues so we can help you faster next time.
• Retention: as long as we operate the Service, unless you ask us to delete it.
• Third parties: our email provider processes messages on our behalf as a processor.

Cookies and local storage on ezpagesync.com

We keep this minimal.

• We do not set advertising cookies. We don't run retargeting pixels.
• Analytics may set a first-party cookie or similar identifier, depending on the vendor's configuration.
• Freemius checkout loads inside an iframe on our pricing page. When you interact with it, Freemius sets its own cookies as part of their checkout flow. Those cookies are governed by Freemius's privacy policy, not ours.

How we use your data

We use the data described above to:

• Run and improve the ezpagesync.com website.
• Deliver paid licenses, plugin updates, and license validation to paying customers.
• Respond to your support requests.
• Prevent abuse of our free-download endpoint.
• Comply with legal obligations (for example, keeping tax records for paid transactions).

That's the entire list. We don't use your data for advertising, behavioral profiling, or resale.

Legal bases (GDPR / UK GDPR)

If you're in the EEA or UK, we rely on the following legal bases:

• Performance of a contract — to deliver the paid Service, license updates, and support to paying customers.
• Legitimate interests — to run basic website analytics, prevent abuse of our download endpoint, and secure our systems. We've balanced these against your rights and believe the impact on you is minimal.
• Consent — where required by local law (for example, non-essential cookies in jurisdictions that require prior consent).
• Legal obligation — to keep tax and financial records related to paid transactions, held by Freemius on our behalf.

You can withdraw consent at any time where consent is the basis. Withdrawing consent doesn't affect processing that already happened.

Sharing and disclosure

We share data with:

• Freemius — as our subprocessor / joint controller for paid customer data, payments, licensing, and updates.
• Our hosting provider — as a processor for the ezpagesync.com website and the download endpoint.
• Googly Analytics — as a processor for aggregated website analytics.
• Our email provider — as a processor for the support inbox.

We do not sell personal data. We don't share your data with advertisers or data brokers.

We may disclose data if we're legally required to (subpoena, court order, other valid legal process) or if it's necessary to protect our rights, your safety, or the security of the Service.

International transfers

We and our subprocessors operate globally. Your data may be processed in the United States and other countries where Freemius, our hosting provider, our analytics vendor, and our email provider run their infrastructure.

We are based in USA. Where data is transferred out of the EEA, UK, or other regions with transfer restrictions, we rely on the transfer mechanisms our subprocessors have in place (such as Standard Contractual Clauses), as described in their respective privacy policies.

Your rights

Depending on where you live, you may have the following rights over your personal data:

• Access — ask for a copy of the data we hold about you.
• Correction — ask us to fix data that's wrong.
• Deletion — ask us to delete your data.
• Portability — ask for your data in a portable format.
• Objection / restriction — object to, or ask us to limit, certain processing.
• Withdraw consent — where processing is based on consent.
• Opt out of "sale" of personal data (CCPA) — not applicable, because we don't sell personal data.
• Non-discrimination (CCPA) — we won't punish you for exercising your rights.

To exercise any of these, email . We'll respond within the timeframe required by applicable law. For data held by Freemius (payment records, license history), you can also contact Freemius directly using the process in their privacy policy.

You also have the right to lodge a complaint with your local data protection authority if you think we've mishandled your data.

Data retention

• Website analytics — aggregate data, retained per Googly Analytics's policy.
• Freemius customer data — as long as your license is active, plus the tax-record retention period required by law after that.
• Free-tier download logs — approximately 30 days.
• Support emails — as long as we operate the Service, unless you ask us to delete them.

When we no longer need data, we delete or anonymize it, except where law requires us to keep it longer (for example, tax records).

Security

We take reasonable steps to protect your data:

• Our website is served over TLS.
• Our free-download flow uses HMAC-signed, time-limited tokens.
• The plugin itself uses HMAC signing for authentication between your staging and production sites.
• We collect only the data described above — the smallest useful set.
• Payment data is handled by Freemius's PCI-compliant infrastructure. We never see full card numbers.

No system is 100% secure. If we ever have reason to believe your data has been improperly accessed, we'll notify you and any regulators as required by law.

Children's privacy

The Service is not directed to children under 16. We don't knowingly collect personal data from children. If you believe a child has provided us data, email and we'll delete it.

Changes to this Policy

We may update this policy from time to time. When we do, we'll post the updated version at this URL with a new effective date. Material changes will be highlighted at the top of the policy for a reasonable period.

Continued use of the Service after changes take effect means you accept the updated policy. If you don't accept it, stop using the Service.

Contact

For any privacy question, request, or complaint:

• Email:
• Controller: EZ Page Sync

For matters specific to payment processing, license records, or plugin telemetry, you can also contact Freemius through the channels listed in their privacy policy.