Privacy policy

Who we are

PluginCity is a trading name of SKILLLED LTD, a company registered in England and Wales, number 15047813, with its registered office at 128 City Road, London, United Kingdom, EC1V 2NX. We are the data controller for the information described here.

For anything in this policy, including a request to see or delete your data, write to support@plugincity.net.

What we collect, and why

When you buy. Your email address, your name if you give one, and the billing details Stripe needs to take the payment. Card numbers are entered on Stripe’s own checkout page and never reach our servers — we store only the customer reference Stripe gives us, so your receipts and payment method stay in one place. We need this to take the payment and issue your licence.

When you sign in. Your email address, and a cookie that keeps you signed in. There is no password to store because signing in works by emailed link.

When a plugin checks its licence. Each site running a Pro plugin contacts us to confirm the licence is valid and to ask whether there is an update. We record the address of the site, the IP address the request came from, and the time. We need this to enforce the number of sites a plan covers and to spot a key being shared far beyond the plan it was bought on.

Choosing a currency. To show prices in pounds or dollars, we look at which country your connection appears to come from while the page is being built. We do not store it or log it against you. If you press the $ / £ switch, we remember your choice in one small cookie, described on the cookies page; if you never press it, we set nothing.

Ordinary server logs. Our host keeps short-lived records of requests to the site, which include IP addresses, for security and to keep the service running.

Counting visits. When a page is shown, your browser tells us so, and we add one to that day’s count of page views. To count each visitor once a day, we turn your IP address and browser type into a short anonymous code using a random value that we delete at the end of the day. Once it is gone the code cannot be turned back into an address by anyone, and we keep only the daily totals. For our plugin pages, the daily totals are kept for each plugin page, so we can see which plugins people look at; that is the name of the page and two numbers, never anything about you. We do not store the address or browser type, we set no cookie, and we do not follow you from one day to the next. Visits are not counted if your browser sends Do Not Track or Global Privacy Control. Our lawful basis is our legitimate interest in knowing how many people use the site.

We do not use advertising or profiling of any kind. There is no third-party script on this site building a profile of you.

Why we are allowed to hold it

• To perform our contract with you — taking payment, issuing your licence, letting you download the plugin and its updates, and answering your questions.
• Our legitimate interests — keeping the service secure, and enforcing the site limit on a plan so that the price everyone else pays stays fair.
• A legal obligation — keeping records of sales for tax purposes.

Who else handles it

We keep the number of companies involved deliberately small. Each acts on our instructions, and none of them is permitted to use your information for their own purposes.

• Stripe — takes the payment and holds the card details, which we never see. Stripe is also the record of your invoices and your payment method.
• Supabase — stores your account, your licences and the licence check records described above, and sends the sign-in emails.
• Vercel — runs the website itself.

We do not sell your information, and we do not share it with anyone for marketing.

Where it goes

These companies are based in, or store data in, the United States. Where information leaves the UK it is protected by the safeguards UK data protection law requires, which for each of them means standard contractual clauses or an equivalent approved mechanism.

How long we keep it

• Your account and licences — for as long as you have a licence with us, and afterwards for six years, because tax law requires us to keep records of what we sold and to whom.
• Licence check records, including IP addresses — 12 months. These are deleted automatically by a nightly job, not on request, so it happens whether or not anyone asks.
• The record of a licence being issued, changed or ended — kept with your account records above, because it is the evidence of what you bought. No IP address is kept with it.
• Payment records — held by Stripe under their own retention rules.

What you can ask us to do

You have the right to ask us to:

• show you a copy of what we hold about you;
• correct anything that is wrong;
• delete it, though we may have to keep sales records for the tax period described above;
• hand it over in a portable form, or send it to someone else;
• stop or limit what we do with it.

Email support@plugincity.net and we will answer within one month. If you think we have got it wrong you can complain to the Information Commissioner’s Office at ico.org.uk, though we would rather you told us first so we can put it right.

Cookies

We set only the cookies that make the site work: one that keeps you signed in, a temporary one that lets a sign-in link work in the browser that asked for it, one that lets you write to support from a plugin’s Support link, and one that shows an administrator a new licence key once. If you press the $ / £ switch to choose a currency, one more remembers that choice. There are no analytics or advertising cookies today, which is why this site does not ask you to accept any.

The full list, with how long each lasts, is on our cookies page. Anything that is not strictly necessary stays off until you agree to it.

Changes

If we change this policy we will update the date at the top. If the change is significant we will email anyone holding a current licence rather than relying on you to notice.