Privacy policy
What GPL Feast keeps about you, why, for how long, who else receives it and your rights.
On this page
In short
We keep what we need to give you what you bought, to keep the service safe and to meet tax rules. We do not sell your data and we use no advertising trackers.
Who we are
This policy covers gplfeast.com (“GPL Feast”, “we”). For anything about your data, write to [email protected].
What we keep
- Your account: your name, email address and password (stored only as a one-way hash).
- Orders and billing: what you bought, when, the amounts, and the billing details you give at checkout, such as your name, address, country and an optional tax ID. Payments are handled by Stripe or PayPal: they receive your card or PayPal details, and we never see or keep your card number.
- Downloads and updates: which product and version, when, from which website (for updates through the GPL Feast Updater) and from which IP address. IP addresses in these records are erased after 12 months.
- Websites using your API key: each website’s address, its WordPress, PHP and GPL Feast Updater versions, how many products it updates, its IP address (erased once the website has not checked in for 12 months) and when it last checked for updates.
- Saved products: the list you keep in your account.
- Messages: what you send through the contact form or as a DMCA notice, with your name, email address and country.
- Emails: the receipts, renewal reminders and account emails we send you.
- Visits: Cloudflare, which delivers and protects the site, processes your IP address and browser details to block attacks, and counts visits without cookies.
Cookies
The cookies we use, and what they do, are listed in the cookie policy.
Why we use it
- To provide what you bought: your account, downloads, updates and support.
- To prevent fraud and abuse, such as shared accounts or automated downloading.
- To keep the records that tax and accounting rules require.
- To answer your messages.
How long we keep it
- Your account, while it is open.
- Orders and invoices, for as long as tax and accounting rules require.
- Download and update records, while your account is open; their IP addresses are erased after 12 months.
- Messages, until we no longer need them to answer you or to keep a record.
- Copies of the emails we send you, 90 days.
Who receives it
- Stripe and PayPal, to take payments.
- Cloudflare, to deliver and protect the site and to check that forms are sent by people (Turnstile).
- Amazon Web Services, to send our emails.
- Our hosting provider, which runs the server the site and its database are on.
Each of them uses the data only to provide its service to us. We do not sell or rent your data to anyone.
Transfers to other countries
These providers may process data in countries other than yours. They do so under their own safeguards, such as standard contractual clauses.
How we protect it
The site is served only over HTTPS, passwords are stored as hashes, and access to the server and to wp-admin is limited to the people who run GPL Feast.
Your rights
You can ask us for a copy of your data, to correct it, to delete it or to stop a use you object to. Write to [email protected] from your account’s email address; before we act we confirm the request by email with that address. We may need to keep order records that tax rules require. You can also complain to the data protection authority where you live.
Children
GPL Feast is not meant for people under 16, and we do not knowingly keep their data.
Changes
When this policy changes, the date at the top of this page changes with it. For important changes we also tell account holders by email.