Privacy Policy.

RecapWP ("we", "us", "our") is committed to protecting your privacy. This policy explains what information is collected in connection with RecapWP, by whom, how it is used, and what rights you have.

RecapWP operates in two distinct contexts: this website (recapwp.com), where you may purchase a Pro license, and the WordPress plugin itself, which runs entirely on your own server. This policy covers both.

Because all payments and licensing are handled by Lemon Squeezy as merchant of record, Lemon Squeezy is the data controller for your purchase and billing information. We are the data controller only for support correspondence we receive directly. Data collected by the Plugin on your WordPress site is stored on your server, under your control — we never have access to it.

2.1 When you visit this website

This marketing site (recapwp.com) runs Google Site Kit, which connects two Google services: Google Analytics 4 and Google Search Console. Analytics collects pages viewed, referring URL, approximate (country-level) location derived from IP, device and browser metadata, and engagement events such as clicks, scroll depth, and time on page. Search Console is a server-to-server data feed from Google about how this site appears in search results — it does not collect anything from your browser.

Visitor IPs are anonymized by Google Analytics before they reach Google's reporting interface. No personally identifying information is collected through Analytics — visitors are distinguished by a randomly generated client ID stored in a first-party _ga cookie (see Section 8 for details on cookies and how to opt out).

2.2 When you purchase a Pro license

All payment processing is handled by Lemon Squeezy, our merchant of record. Lemon Squeezy collects and controls your name, email address, billing address, and payment details. We receive a notification from Lemon Squeezy confirming your purchase so we can verify license activation — we do not independently store your billing information or payment card details.

2.3 When you contact support

If you email us directly, we collect your name, email address, and the content of your message. This information is used solely to respond to your enquiry.

2.4 When you use the Plugin on your WordPress site

RecapWP collects the following data from your WordPress installation and stores it locally in your own database on your own server:

• Content counts — posts, pages, media files, comments
• User counts — total registered users and new users per month
• Site health — WordPress version, PHP version, active plugin count, disk usage
• Security — failed login attempt count, SSL certificate status
• Performance — Google PageSpeed score and uptime percentage (only if you configure API keys in Settings)
• WooCommerce — monthly orders, revenue, and new customers (only if WooCommerce is active on your site)

By default, this data never leaves your server — it is not transmitted to us, and we have no access to it at any time. The only exceptions are optional features you switch on yourself: the Performance integrations (Google PageSpeed, UptimeRobot) and the AI report features, which send data only to the third-party service you configure with your own API key. See Section 4.

2.5 When a report is sent

RecapWP sends the monthly report as an HTML email to your site's WordPress administration email address by default, or to a custom recipient address if you enable that option in Settings, using your site's own outgoing mail system (wp_mail). We do not receive a copy of the report.

The only personal information we directly hold is support correspondence. We use it solely to respond to your enquiry. We do not use it for marketing, advertising, or any other purpose.

We do not sell, rent, or share your personal information with third parties for their own commercial use.

3.1 Legal basis for processing (GDPR)

Where the GDPR applies, we process support correspondence on the basis of legitimate interest — specifically, responding to enquiries you have initiated and protecting our business from fraud and abuse. All other personal data associated with your purchase is processed by Lemon Squeezy under their own legal basis as the data controller for that information.

The following third-party services are used in connection with RecapWP. Each operates under its own privacy policy and is independently responsible for the data it collects.

• Google Site Kit (Google Analytics 4 + Google Search Console) — installed on recapwp.com to understand how visitors find and use the marketing site. Analytics collects pageviews, referrer, country-level location, device metadata, and engagement events; IPs are anonymized. Search Console is a server-to-server feed and does not interact with your browser. No PII is transmitted to Google. See Google's Privacy Policy. To opt out of Analytics across all sites, install the official Google Analytics Opt-out Browser Add-on.
• Lemon Squeezy — processes all payments and manages license delivery as merchant of record. Lemon Squeezy is the data controller for your purchase and billing information. See lemonsqueezy.com/privacy.
• Google PageSpeed Insights API — if you configure a PageSpeed API key in Plugin Settings, your site's public URL is sent to Google's API to retrieve a performance score. Entirely optional — no data is sent to Google without your API key. See Google's Privacy Policy.
• UptimeRobot — if you configure an UptimeRobot API key in Plugin Settings, uptime data is fetched from their API. Entirely optional — no data is sent to UptimeRobot without your API key. See UptimeRobot's Privacy Policy.
• AI provider (optional, your own) — if you enable the AI report features and configure a provider and API key in Plugin Settings, the month's report figures (your site's own metrics — never your visitors' personal data) are sent to the AI service you choose — for example OpenAI, OpenRouter, Groq, or a self-hosted model — to write the summary and recommendations. Entirely optional and off by default; nothing is sent without your own key, and the provider you pick operates under its own privacy policy.

API keys you provide are stored in your own WordPress database, displayed only in masked form in the admin interface, and are never transmitted to RecapWP or any party other than the respective service.

5.1 On your WordPress site

RecapWP stores collected data and report records in your WordPress database for as long as the Plugin is installed and active. By default, deleting the Plugin preserves this data, so a reinstall resumes where it left off. If you want everything removed on deletion, enable the "delete all data on uninstall" option in Settings before deleting the Plugin — only then are all stored data, report records, settings, and license information permanently removed from your database. This setting is off by default.

5.2 Purchase and billing data

We do not maintain a marketing or billing database. We store only active license keys and the email addresses associated with them, strictly for the purpose of validating software activation and delivering updates. All core purchase history, billing addresses, and payment information are held and controlled by Lemon Squeezy. For questions about how long they retain your data or to request deletion, refer to Lemon Squeezy's Privacy Policy.

5.3 Support correspondence

If you contact us by email, that correspondence is retained in our inbox for as long as reasonably necessary to resolve your issue, and for no longer than two (2) years.

We take reasonable precautions to protect any personal information we hold. This website is served over HTTPS. We do not store payment card information — all payment data is controlled by Lemon Squeezy. Access to any correspondence we hold is limited to authorised personnel only.

No method of transmission over the internet is completely secure. While we take these measures seriously, we cannot guarantee absolute security and accept no liability for unauthorised access that occurs despite our reasonable precautions.

Depending on your location, you may have rights in relation to personal data held about you, including the right to access, correct, delete, restrict, or port that data.

Because we do not maintain a customer database, most data associated with your purchase — including your name, billing email, and order history — is held by Lemon Squeezy. To exercise rights over that data, contact Lemon Squeezy directly through their Privacy Policy page.

For any support correspondence we hold directly, email hello@recapwp.com. We will respond within the timeframe required by applicable law — within 30 days for GDPR requests and within 45 days for CCPA requests. If you are in the EU or UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.

7.1 California residents (CCPA)

You have the right to know what personal information we hold about you, to request its deletion, to opt out of its sale or sharing (we do not sell or share personal information for advertising), and to not be discriminated against for exercising these rights. Because purchase data is held by Lemon Squeezy, please direct billing-related CCPA requests to them. For support correspondence we hold, email hello@recapwp.com with "CCPA Request" in the subject line.

This website uses Google Analytics 4 (via the Site Kit plugin) to measure traffic and understand how visitors find and use the marketing site. To do this, Google Analytics sets the following first-party cookies in your browser:

• _ga — stores a randomly generated client ID used to distinguish unique visitors. Expires after 2 years.
• _ga_<container-id> — stores session state for the specific Analytics property on this site. Expires after 2 years.

These cookies do not contain personal information. They hold only a random identifier so Google Analytics can recognise return visits and aggregate session data. IPs are anonymized by Google Analytics before being recorded.

This website does not use advertising cookies, retargeting cookies, or any form of cross-site tracking. We do not run Google Ads, Facebook Pixel, LinkedIn Insight Tag, or any equivalent advertising or marketing pixel.

WordPress also sets functional session cookies only for authenticated administrators logged in to the WordPress dashboard — these do not affect public visitors and are not used to track anyone across other websites.

8.1 How to opt out

You can disable analytics cookies in three ways:

• Use your browser's built-in cookie controls to block third-party or all cookies for this site.
• Install Google's official Google Analytics Opt-out Browser Add-on, which prevents Analytics from running on any website.
• Enable your browser's "Do Not Track" / "Global Privacy Control" setting — while not all sites honour these signals, many privacy-focused extensions use them to block trackers.

RecapWP is a business tool intended for use by adults managing WordPress websites. We do not knowingly collect personal information from anyone under the age of 16. We do not maintain a customer database, so we do not hold minors' personal data directly — any purchase data is held by Lemon Squeezy. If you believe a minor has contacted us via support email, contact us at hello@recapwp.com and we will remove that correspondence immediately.

RecapWP is operated from the United States. If you are accessing this website or purchasing a license from outside the US, your personal information may be transferred to and processed in the United States. Where required by applicable law, we ensure such transfers are subject to appropriate safeguards. Because Lemon Squeezy is the data controller for purchase and billing data, their transfer mechanisms and safeguards apply to that information. Similarly, because Google is the data controller for the Analytics data collected through Site Kit, your visit data may be transferred to and processed by Google on servers located outside your home country — Google's own data-transfer safeguards (including Standard Contractual Clauses where applicable) apply to that processing.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will update the "Last updated" date at the top of this page when changes are made. For significant changes that affect how personal data is handled, we will make reasonable efforts to notify users before the changes take effect.

Questions, requests, or concerns about this policy? Email us at hello@recapwp.com.