Privacy Policy

We store the minimum we need to sell you a plugin, keep it updated, and answer your email.

Last updated: June 5, 2026

This policy explains what personal data we collect, why, who we share it with, and the rights you have over it. It applies to MMPlugs.com and the plugins you buy here.

Who we are

MasseyMedia, Inc., doing business as MMPlugs (“MMPlugs”, “we”, “us”), is the data controller for personal data collected through this site and our plugins. For any privacy question or request, email support@mmplugs.com. General enquiries go to info@mmplugs.com.

What we collect

At checkout — Stripe collects your email, billing address, and payment card. We receive your email and a Stripe customer ID. Card numbers never touch our servers; they stay on Stripe’s PCI-compliant infrastructure.

When you create an account — your email and the license keys, purchases, and activated domains tied to it. You can see all of this at /account/.

On the site — standard server access logs (IP address, user agent, request URL) retained for 30 days for security and debugging.

From plugin activations — when a paid plugin activates against a customer site, our license server stores the site’s domain, an activation timestamp, and an instance ID we hash before storing. We use this to enforce seat limits and to power the “deactivate” button in your account.

From update checks — when an activated site asks for plugin updates, we log the request domain, plugin version, and WordPress version. This is standard plugin-updater behaviour.

Analytics — we use Google Analytics (GA4) to understand which pages people visit and how they got here. Where required, this runs only after you accept analytics cookies (see Cookies). Google processes this data on our behalf; IP addresses are anonymised where the setting is available.

When you email us — your message, your address, and anything you choose to include. We keep support threads so we can pick up where we left off.

Why we use it (and our legal basis)

To deliver what you bought — issue license keys, run updates, enforce seat limits. Legal basis: performance of our contract with you.
To bill you — Stripe processes payments and stores receipts. Legal basis: contract, plus our legal obligation to keep tax records.
To support you — answer email, fix bugs, send transactional notices (license keys, renewal receipts, password resets). Legal basis: contract.
To improve the site and product — analytics and aggregate update-check stats tell us which platform versions to keep testing against. Legal basis: your consent (analytics cookies) or our legitimate interest in a working product.
Marketing email — if you opt in, we send occasional product news and offers. Legal basis: your consent. Every message has an unsubscribe link, and opting out never affects your license or support.

Who we share it with

We don’t sell or rent your data. We share it only with the service providers that make MMPlugs work, and only what each one needs:

Stripe — payment processing and subscription billing.
Google Analytics — site usage analytics.
Our email and hosting providers — to send transactional and (opt-in) marketing email and to run the site.

We may also disclose data if the law requires it, or to protect our rights, but we’ll push back on overbroad requests.

International transfers

Some of our providers (including Stripe and Google) are based in the United States and may process your data there. Where we transfer personal data out of the EEA or UK, we rely on the providers’ Standard Contractual Clauses or equivalent safeguards.

How long we keep it

We keep your account and license data for as long as you have an active license, and for a reasonable period afterward in case you come back. We retain Stripe-side invoice records for 7 years to meet tax obligations. Server access logs are deleted after 30 days. Marketing consent records are kept until you withdraw consent.

Your rights

You can ask us to:

Access the personal data we hold about you;
Correct anything that’s wrong;
Delete your account — we’ll wipe the customer record and revoke the licenses (we’ll keep the minimum invoice data tax law requires, not tied to a usable account);
Export your data in a portable format;
Object to or restrict certain processing, and withdraw analytics or marketing consent at any time.

Email support@mmplugs.com and we’ll respond within 30 days. For EU and UK residents these are your GDPR / UK GDPR rights, and you also have the right to complain to your local data protection authority (in the UK, the ICO).

Cookies

We use two kinds of cookies:

Necessary — a functional session cookie that keeps you logged in. This is always on; the site can’t work without it. Stripe’s hosted checkout also sets its own cookies on checkout.stripe.com per Stripe’s policy.
Analytics — Google Analytics cookies that measure site usage. Where required by law, these load only after you accept them, and you can change your choice any time from the cookie banner.

We don’t use advertising or cross-site tracking cookies.

Children

MMPlugs is a tool for site owners and isn’t directed at children. We don’t knowingly collect data from anyone under 16.

Changes to this policy

If we change how we handle data, we’ll update this page and move the “last updated” date. Material changes that affect you will be flagged by email where we have your address.

Contact

Privacy requests: support@mmplugs.com. Everything else: info@mmplugs.com.