This policy explains what personal data clearcrumb.com collects, why, and what rights you have. It covers this website. The ClearCrumb plugin itself runs on your own WordPress site and sends nothing to us.
Who we are
Usman Khan, Dotance, 2nd Floor, Red Building, J-Road, Lahore Cantt 54000, Pakistan, who builds and runs the ClearCrumb WordPress plugin and this website. Email: [email protected]. Full details in the Legal notice.
If you use the ClearCrumb plugin on your site
The plugin runs on your own WordPress site. Consent records, settings and scan results stay in your database; we do not receive them, cannot see them and are not your processor. You are the controller for the personal data of your own visitors and are responsible for your own privacy policy, your banner texts and your legal bases. The cookie policy the plugin generates is a starting point, not legal advice.
The plugin contacts outside services only for features you use, as listed in its readme (for example, video thumbnails from YouTube or Vimeo for blocked embeds). WordPress.org handles plugin downloads and updates under its own privacy policy.
What we collect and why
| When | Data | Purpose and legal basis | Kept for |
|---|---|---|---|
| You visit the site | IP address, browser, pages requested (server and Cloudflare logs) | Delivering and protecting the site; legitimate interest (Art. 6(1)(f) GDPR) | Up to 30 days |
| Visit statistics | Page views, referrer, country, device type, without cookies or identifiers | Understanding which pages help; your consent (Art. 6(1)(a) GDPR), asked through the cookie banner | Aggregated only |
| You join the Pro waitlist | Email, number of sites, time of sign-up and confirmation | Sending the launch email and discount; your consent (Art. 6(1)(a)) | Until you unsubscribe or 6 months after Pro launch |
| You contact us | Name, email, topic, message | Answering you; legitimate interest (Art. 6(1)(f)) or steps before a contract (Art. 6(1)(b)) | 2 years after the last message |
| You buy Pro (after launch) | Name, email, billing country, VAT ID, licence | Contract and tax law (Art. 6(1)(b), (c)) | As tax law requires |
| Your cookie choice | Consent cookie and a consent log entry (hashed ID, shortened and hashed IP) | Proving consent; legal obligation (Art. 6(1)(c)) | 30 days in the log; cookie up to 12 months |
Who processes data for us
- Hostinger — web hosting.
- Cloudflare — content delivery, security and cookie-less Web Analytics.
- Brevo (Sendinblue SAS, France) — sending email and storing the waitlist.
- Freemius — checkout, licences and invoices, once Pro launches.
Where a provider processes data outside the EU/EEA, we rely on the EU–US Data Privacy Framework or Standard Contractual Clauses.
Where your data is handled
ClearCrumb is run from Pakistan. Your data is stored with the providers above; when we read your message or manage the waitlist, it is accessed from Pakistan, which has no EU adequacy decision. We only do this to give you what you asked for, such as an answer or the launch email (Art. 49(1)(b) GDPR, and your consent where you gave it), and only we have that access.
Links to other sites
Download buttons take you to WordPress.org, and other links lead to sites such as the support forum or AI assistants. Those sites have their own privacy policies; we are not responsible for how they handle data.
Your rights
You can ask for access, correction, deletion, restriction, a copy of your data, and object to processing based on legitimate interest. You can withdraw consent at any time, for example with the unsubscribe link in every email. Write to [email protected]. We answer within one month and may ask you to confirm your identity first, so that nobody else gets your data. You can also complain to your data protection authority.
US visitors
We do not sell or share personal information for targeted advertising. Global Privacy Control signals are honoured.
Security
The site runs on HTTPS behind Cloudflare, admin access is restricted, and we keep as little data as we can. No method of storing or sending data is completely secure, so we cannot guarantee absolute security; if a breach affects you, we will tell you as the law requires.
Children
This site is for website owners and is not directed at children under 16. We do not knowingly collect their data; if you believe a child has given us data, write to us and we will delete it.
No automated decisions
We do not make decisions about you by automated means or build profiles of you.
Do you have to give us data?
No. You can use this site without telling us anything. Without an email address we cannot add you to the waitlist or reply to you.
Changes
We update this page when our processing or the law changes and show the date at the top. The version on this page is the one that applies.