Your accountGet a plugin

Privacy

Last updated 21 October 2026

Draft: not yet reviewed. This page hasn't been reviewed by a lawyer yet.

Who we are

ZealDen (“we”) is the controller for the personal data described here. Questions and requests go to support@zealden.com.

This policy covers zealden.com, our store at store.zealden.com, the license checks our plugins make, and support. Payments are handled by Polar, which has its own policy (below).

zealden.com

  • Cookies only if you allow them. See Cookies and Google Analytics below.
  • Cloudflare Web Analytics. We count visits with Cloudflare Web Analytics, which uses no cookies or other storage in your browser and doesn’t follow you across sites. For each page view its script sends Cloudflare the page’s address, the site you came from, your browser and device type, and how fast the page loaded; Cloudflare works out your country from your IP address and shows us only totals. Cloudflare does this as our processor. The legal basis is our legitimate interest in knowing which pages people read and how well the site works.
  • Hosting. The site is served by Cloudflare, which processes each request (including your IP address and browser details) to deliver the page and protect the site from attacks. Cloudflare acts as our processor. We don’t keep these request logs ourselves; Cloudflare keeps them briefly under its own policy.

Cookies and Google Analytics

The first time you visit zealden.com, we ask whether we may use analytics cookies and ad cookies. You can reject both, allow analytics only, or accept both.

  • Before you answer, and if you say no, Google’s tag still loads but sets no cookies. It sends Google only signals without cookies or identifiers: the time, your browser type, the site you came from, whether you consented, and a random number for that page view. Google uses these to estimate visits in aggregate. This is Google’s “advanced” consent mode.
  • Your answers are kept in two cookies, wp_consent_statistics and wp_consent_marketing, for six months, so we don’t ask on every page. Our store reads the same answers.
  • If you allow analytics, Google Analytics 4 shows us which pages people visit, how they arrived (for example from a search or a link) and whether they went on to buy. It sets the _ga and _ga_Q5K39P5TFX cookies, which last up to two years. It sends Google the page’s address, the site you came from, your browser and device, an approximate location worked out from your IP address, and events such as scrolling, outbound links and downloads.
  • If you accept ad cookies, our ad platforms may measure which ads led to a visit or a purchase. We use none today; we’ll name each one here before we do.
  • Google acts as our processor. Google Signals is off. With ad consent refused, ad-click identifiers are removed from what Google receives. Google keeps analytics data for us for 14 months.
  • The legal basis is your consent; for the cookieless signals, our legitimate interest in counting visits.

To change your answers, use Cookie settings; the link is also at the bottom of every page. Withdrawing analytics consent removes Google’s cookies.

Offer reminders

If you ask for a reminder on the founding customer offer page, we process your email address to send you at most three emails about the offer: when it opens on 25 October 2026, in Black Friday week, and two days before it ends on 31 December 2026.

  • Brevo (brevo.com, based in France) keeps the list and sends the emails, as our processor. It asks you to confirm your address first, and records when you signed up and confirmed.
  • Every email has an unsubscribe link, and you can ask us to remove you at support@zealden.com.
  • We delete the list by 15 January 2027. We don’t use it for anything else, and we don’t share it.
  • The legal basis is your consent, which you can withdraw at any time.

store.zealden.com

The store runs on WordPress and WooCommerce. When you buy or sign in, we process:

  • Account and order details: your name, email address, billing address, phone number (if you give one) and the details of what you bought.
  • License records: your keys, which products and plan they belong to, when they expire, and the sites they’re active on.
  • Subscription details from Polar: whether a plan renews and when.

We use these to deliver your purchase, run your license, send order and license emails (including expiry reminders for plans that don’t renew automatically), and give support. The legal basis is performing our contract with you. We keep them for as long as your account exists, and order records for seven years after the order, for our accounts.

Cookies on the store. WooCommerce and WordPress set cookies that the store needs to work: your cart, your checkout session and, when you sign in, your login. They’re strictly necessary, so they don’t need consent:

  • woocommerce_cart_hash and woocommerce_items_in_cart: what’s in your cart, until you close your browser;
  • wp_woocommerce_session_…: your cart and checkout session, for two days;
  • wordpress_logged_in_… and wordpress_sec_…: your login, when you sign in.

Payments: Polar

Polar (polar.sh) is our reseller and merchant of record. When you pay, Polar collects your payment details, billing address and tax information as the seller of the order, and is the controller of that data under its privacy policy. We never see your full card details.

To create the checkout, our store sends Polar your name, email address, IP address, company name (when you give one), the store’s language, the order’s ID, number and key, the store’s address, the total and currency, and the names and quantities of the items you’re buying. If you’re signed in, it also sends an ID made of the store’s address and your account number, so Polar recognises you next time.

License checks from our plugins

Our plugins contact store.zealden.com only after you enter a license key in them. From then on:

  • About twice a day, each site sends the key, the site’s address, a random ID for that site, and the WordPress, PHP and plugin versions it runs, to check for updates and whether the license is active.
  • Activating a key sends the key, the site’s address and that random ID. Deactivating sends the key and the ID.

We use this to enforce your plan’s site limit, deliver updates and show you which sites use your key. The legal basis is performing our contract with you. We don’t store the IP addresses these requests come from. We keep activation records until the license ends, and for one year after, to help with support questions.

Support

When you email us, we process your message, your email address and anything you include, to answer you. Emails to support@zealden.com are forwarded by Cloudflare to our mailbox. We keep support emails for two years after our last reply.

What our plugins do on your own site

When you run a ZealDen plugin on your WordPress site, you decide what it does with your visitors’ and customers’ data. You are the controller, and ZealDen is the software vendor, not a processor: the data goes from your site to the services you choose, not to us.

  • Track Them All sends event data only to the ad platforms you turn on, and, where a consent plugin is in use, only for visitors who consented. That data is the event name, order value and currency, product identifiers, the page address, the visitor’s IP address, browser user agent and ad-click IDs, and customer details such as email address, phone number, name and address, which are normalised and SHA-256 hashed before they leave your server.
  • Safe Media Offload sends your media files to the storage provider you choose, with the bucket and keys you enter.
  • Payments via Polar sends order and customer details to Polar to take the payment.

Each plugin’s readme lists these services and links their terms and privacy policies, so you can describe them in your own policy.

Who we share data with

  • Polar, to take payments (above).
  • Google, for Google Analytics on zealden.com, if you allow it.
  • Cloudflare, which hosts zealden.com and counts its visits, sits in front of the store, and forwards email sent to support@zealden.com.
  • FlyWP and Oracle Cloud, which run the store’s server.
  • The provider that delivers the store’s emails.
  • Authorities, when the law requires it.

We don’t sell personal data or share it for advertising.

International transfers

Some of these providers process data outside your country, including in the United States. Where the law requires, transfers rely on the safeguards these providers offer, such as the EU–US Data Privacy Framework or standard contractual clauses.

Your rights

Depending on where you live, including under the GDPR, the UK GDPR and the California Consumer Privacy Act (CCPA), you can:

  • ask for a copy of your data, and have it corrected or deleted;
  • object to or restrict some processing, and take your data elsewhere;
  • complain to your data protection authority.

We don’t sell or share personal data as the CCPA defines those terms. To use your rights, email support@zealden.com. We’ll answer within one month.

Children

Our products are for businesses and site owners. We don’t knowingly collect data from children.

Changes

We’ll post changes here with a new “Last updated” date, and email account holders about significant ones.

Contact

ZealDen. Email support@zealden.com.