Privacy policy

Who we are

Plugin City is a trading name of SKILLLED LTD, a company registered in England and Wales, number 15047813, with its registered office at 128 City Road, London, United Kingdom, EC1V 2NX. We are the data controller for the information described here.

For anything in this policy, including a request to see or delete your data, write to support@plugincity.net.

What we collect, and why

When you buy. Your email address, your name if you give one, and the billing details Stripe needs to take the payment. Card numbers are entered on Stripe’s own checkout page and never reach our servers — we store only the customer reference Stripe gives us, so your receipts and payment method stay in one place. We need this to take the payment and issue your licence.

When you sign in. Your email address, and a cookie that keeps you signed in. There is no password to store because signing in works by emailed link.

When a plugin checks its licence. Each site running a Pro plugin contacts us to confirm the licence is valid and to ask whether there is an update. We record the address of the site, the IP address the request came from, and the time. We need this to enforce the number of sites a plan covers and to spot a key being shared far beyond the plan it was bought on.

Ordinary server logs. Our host keeps short-lived records of requests to the site, which include IP addresses, for security and to keep the service running.

We do not use analytics, advertising or tracking of any kind. There is no third-party script on this site building a profile of you.

Why we are allowed to hold it

• To perform our contract with you — taking payment, issuing your licence, letting you download the plugin and its updates, and answering your questions.
• Our legitimate interests — keeping the service secure, and enforcing the site limit on a plan so that the price everyone else pays stays fair.
• A legal obligation — keeping records of sales for tax purposes.

Who else handles it

We keep the number of companies involved deliberately small. Each acts on our instructions, and none of them is permitted to use your information for their own purposes.

• Stripe — takes the payment and holds the card details, which we never see. Stripe is also the record of your invoices and your payment method.
• Supabase — stores your account, your licences and the licence check records described above, and sends the sign-in emails.
• Vercel — runs the website itself.

We do not sell your information, and we do not share it with anyone for marketing.

Where it goes

These companies are based in, or store data in, the United States. Where information leaves the UK it is protected by the safeguards UK data protection law requires, which for each of them means standard contractual clauses or an equivalent approved mechanism.

How long we keep it

• Your account and licences — for as long as you have a licence with us, and afterwards for six years, because tax law requires us to keep records of what we sold and to whom.
• Licence check records, including IP addresses — 12 months. These are deleted automatically by a nightly job, not on request, so it happens whether or not anyone asks.
• The record of a licence being issued, changed or ended — kept with your account records above, because it is the evidence of what you bought. No IP address is kept with it.
• Payment records — held by Stripe under their own retention rules.

What you can ask us to do

You have the right to ask us to:

• show you a copy of what we hold about you;
• correct anything that is wrong;
• delete it, though we may have to keep sales records for the tax period described above;
• hand it over in a portable form, or send it to someone else;
• stop or limit what we do with it.

Email support@plugincity.net and we will answer within one month. If you think we have got it wrong you can complain to the Information Commissioner’s Office at ico.org.uk, though we would rather you told us first so we can put it right.

Cookies

Only the ones that make the site work: a cookie that keeps you signed in, and one that shows a newly issued licence key once in the admin area. There are no analytics or advertising cookies, which is why this site does not ask you to accept any.

Changes

If we change this policy we will update the date at the top. If the change is significant we will email anyone holding a current licence rather than relying on you to notice.