This policy explains what data this website and the OctoLangWP plugin collect, why, and what happens to it. It is written to be read, not to be survived.
In short
- We never see the content of your website.
- Translation runs between your server and your own provider, on your own key.
- The free plugin never contacts us.
- This website sets one cookie, and only when you sign in to your account.
1. Who is responsible
[LEGAL NAME], [ADDRESS], VAT ID [NIP], is the data controller for the processing described here. Contact: support@octolangwp.com
2. What the plugin sends to us
The free version sends us nothing at all. It never contacts our servers.
The paid version contacts our licence server when you activate a licence, and roughly once an hour afterwards to confirm the licence is still valid. Those requests contain:
| Data | Why |
|---|---|
| Licence key | To identify which subscription is being used |
| Site URL and a hash of it | To count activation slots and bind the licence to your domain |
| Plugin and WordPress version | To serve the right update and diagnose compatibility reports |
We do not receive your page content, your posts, your visitors, your traffic figures, or anything typed by your users.
3. What goes to your translation provider
When a page needs translating, your server sends the text of that page directly to DeepL or OpenAI using the API key you configured. This is a relationship between you and that provider. We are not a party to it, we do not proxy it, and we cannot read it. Their handling of that text is governed by their own privacy policies, which you should read before entering a key.
4. When you buy
Purchases are processed by Lemon Squeezy, LLC as merchant of record. They collect your name, email, billing address, VAT number where relevant, and payment details. We never see or store your card details. We receive your email address and the details of your subscription so we can issue a licence and provide support.
5. Your account on this website
You can sign in at account.octolangwp.com to see your licences, release sites and download the add-on. You sign in with the email you bought with, by a one-time link we email you, or with Google or Apple.
- If you use the email link, we store a hashed copy of the link for 15 minutes so it can be used once.
- If you use Google or Apple, they tell us your email address and that it is verified. We use it only to find your licences and do not receive your password or contacts. Their own privacy policies apply to the sign-in itself.
- Once you are signed in, we set one strictly necessary cookie,
__session, which keeps you signed in for up to seven days. It holds a random identifier, not your email. Signing out deletes it, together with our record of the session.
We use no analytics or advertising cookies on this website. If you write to us by email, we keep that correspondence so we can follow up.
6. How long we keep things
- Licence and activation records: for as long as your subscription is active, plus two years.
- Sign-in links: 15 minutes. Account sessions: seven days, or until you sign out.
- Invoices and transaction records: as long as tax law requires, which is generally five years.
- Support correspondence: three years from the last message.
7. Who else processes data
- Lemon Squeezy, LLC: payments, invoicing and tax, as merchant of record.
- Google Cloud (Firebase): hosting of this website and the licence server, in the European Union region.
- Our email provider: support correspondence and transactional messages, including sign-in links.
- Google and Apple: only if you choose to sign in with them.
8. Your rights
Under the GDPR you may request access to your data, correction, deletion, restriction of processing, portability, and you may object to processing. Write to support@octolangwp.com and we will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority; in Poland this is the President of the Personal Data Protection Office (UODO).
9. Changes
If this policy changes materially we will update the date at the top and notify active subscribers by email.