Privacy Policy

What we collect

When you create an account: your name, email address, and a hashed password. If you sign in with Google we receive your name, email address and profile picture from Google — never your Google password.

When you buy: the order, its items, the amount, any coupon used, and the PayPal transaction reference. Card and bank details go directly to PayPal and never reach our servers.

When you download: which template, when, and the IP address the request came from. That record is what enforces the All Access daily limit and lets us spot an account being used to scrape the library.

We do not collect a billing address, a phone number, or a tax number, because selling a $14 download does not require them.

Why we are allowed to hold it

Your account and order data is processed to perform the contract you entered into when you bought or downloaded something — we cannot deliver a purchase without it.

Download logs and IP addresses are processed on the basis of our legitimate interest in preventing abuse and enforcing licence limits.

Any marketing email is sent only with your consent, and every one carries an unsubscribe link.

Who else sees it

PayPal, to take payment. Brevo, to deliver transactional email such as verification links and receipts. Our hosting providers, who store the database and the template files.

That is the complete list.

We do not sell your data, we do not share it with advertisers, and we run no advertising pixels on the site.

How long we keep it

Account and order records are kept while your account is open and for as long as we need them for tax and accounting purposes afterwards.

Download logs are operational data and are pruned periodically; they are not kept indefinitely.

Delete your account and we remove your personal data, keeping only what we are legally required to retain about completed transactions.

Your rights

You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Email info@wpnexa.com and we will action it — there is no form to fill in.

Depending on where you live you may also have the right to object to processing, to restrict it, or to complain to your local data protection authority. Please raise it with us first; it is usually quicker.

Cookies

We set a session cookie so you stay logged in, and a CSRF token cookie to protect forms from cross-site abuse. Both are strictly necessary for the site to work.

Your browser also stores small preferences locally, such as whether you dismissed the promo bar.

We do not use advertising or analytics cookies.

Security and children

Passwords are stored hashed, never in plain text. Download links are short-lived and signed, so a link cannot be shared or reused after it expires. The site is served over HTTPS throughout.

WPNexa is intended for people building websites professionally and is not directed at children under 16. We do not knowingly collect their data.