1.1 Plugins That Store Personal Info Locally

Link to chapter 1

Many of our plugins have features built in that may result in the storing of personal information of your site’s visitors and users in your WordPress database. Please note, this personal information is not sent to our stored here at WPMU DEV (check here for plugins that may send information to WPMU DEV).  In most cases, you will be able to see and access the data right inside of the WordPress dashboard in the settings pages for each plugin. For example, form entries in Forminator.

You should be aware of these plugins to ensure that you follow any local laws or regulations when it comes to disclosing to your users what data you store and how you use it. You may also need to provide users with copies of this data should it be requested and may need to fully delete the data when asked as well. Should you need any help with these requests, please reach out to our support team.

As a rule, you should:

  1. Always inform users that you are collecting any personal data, get consent to do so, and let them know specifically why you are collecting it. The best place to do this is in your Privacy Policy.
  2. Delete or anonymize any and all personal data when you no longer need it.

The following WPMU DEV plugins may store personal information in your WordPress database (depending on your use of the plugin and settings):

  1. Appointments+ – User registration and appointment information.
  2. Avatars – Avatar images that users upload themselves can be classified as personally identifiable information.
  3. Contact Widget – May collect an email address of individual completing the contact form.
  4. CoursePress Pro – Profile and course information.
  5. Defender – IP addresses, content, and user information of all site visitors.
  6. Forminator – Forms can be used to collect and store all types of information.
  7. Hustle – Form tool can be used to customize information collected.
  8. MarketPress eCommerce – Checkout information for users.
  9. Membership 2 – Profile and checkout information for users.
  10. Pro Sites – Checkout information.
  11. Subscribe By Email – Email addresses not necessarily associated with WordPress user accounts.
  12. WP Smush Pro – Image files may contain EXIF data which could identify a user. By default, with WP Smush Pro enabled, EXIF data is not saved locally, but a setting in the plugin does allow for it to be enabled.

1.2 Plugins That Send WPMU DEV Info

Link to chapter 2

WPMU DEV Dashboard and API: The Dashboard plugin is used to connect your WPMU DEV account with your WordPress installation and sends to WPMU DEV the following information: WordPress/BuddyPress version and size, installed plugins/themes, and site URL. The WPMU DEV API does NOT track any personal or user information. Data is not sold or shared with any third party and is only used for statistical, security and support related requirements, including the ability to push security updates should it be required.

Some of our plugins require the WPMU API key and the WPMU DEV Dashboard plugin to be in place in order to make their features and services possible. These include:

  1. Anti-Splog
  2. Defender
  3. Integrated Video Tutorials
  4. Hummingbird
  5. SmartCrawl Pro
  6. Snapshot Pro
  7. WP Smush Pro

A few of our plugins may also send end-user or site visitor personal information to WPMU DEV, depending on the settings in place in your WordPress installation.

If you use any of these plugins, you should list WPMU DEV as a 3rd party service provider or Data Processor in your Privacy Policy or data area of your website.

These plugins are:

Defender: If you choose to activate ‘Audit Logging’ in Defender, we will track and store site and user activity, such as usernames, comments, posts, login attempts, setting changes, and upload timestamps on our secure servers. ‘Audit Logging’ is an optional feature that can be turned off in the Defender plugin.

Snapshot Pro: Used to store backups of your WordPress database, so this may include any personal information that is also in your WordPress database. You can fully delete backups at any time.

1.3 Plugins That May Add Cookies

Link to chapter 3

Some plugins may make use of Cookies in order to provide the functionality desired.

You may be required to alert your site’s visitors and users to the use of the cookies in your Privacy Policy or Cookie area of your website. Specific descriptions of cookies and their purpose will be added to plugin readme.txt files in the near future according to general WordPress plugin best practices.

The following WPMU DEV plugins may add Cookies to your site(s) when activated:

  • A/B Theme Testing
  • Appointments+
  • Chat
  • Domain Mapping
  • Google Analytics+
  • Hustle
  • MarketPress eCommerce
  • Password Protect
  • PopUp Pro
  • Post Voting Plugin
  • Snapshot Pro

1.4 Plugins With 3rd Party Integrations

Link to chapter 4

Many of our plugins have features built in that allow for integrations with various 3rd party services.

When using these plugins with these 3rd party services, you may be required to provide this information to your end-users or site visitors in your Privacy Policy or Legal/Terms area of your website. Depending on the circumstances, you may also be required to gain the consent of your site’s visitors as well.

These plugins are:

  • Appointments+: Google Calendar and payment gateways
  • CoursePress Pro: WooCommerce
  • Custom Sidebars Pro: WPML/Polylang
  • Domain Mapping: eNom
  • Forminator Pro: Google reCAPTCHA
  • Google Analytics+: Google Analytics
  • Hummingbird: Cloudflare and Stackpath
  • Hustle: Various email services including MailChimp, AWeber, Constant Contact, GetResponse, Sendy, Mad Mimi, Infusionsoft, Campaignmonitor, ConvertKit
  • MarketPress eCommerce: Payment gateways including 2Checkout, Authorize.net AIM, eWay shared payments, eWay Rapid 3.1 Payments, Mijireh, Mollie, Paymill, PayPal, PIN, Simplify Commerce by MasterCard, Stripe and WePay
  • Pro Sites: PayPal, Stripe, Google Analytics, Taxamo
  • WPMU DEV Dashboard: Mixpanel (analytics), LiveChatInc (in dashboard support)