Privacy Policy

Effective date: 2026-07-06

WordPuppi is built by Webpuppi. We keep this policy short and honest: we collect what we need to run the service, and nothing more. This page explains what that is, where it goes, and how to get rid of it.

What we collect

  • Account data. Your email address and name, used to create your account, sign you in, and send you transactional email (receipts, password resets, service notices).
  • Content you author. Posts, pages, media, and site settings you create in WordPuppi. This is your content — we store it so we can host and publish it for you.
  • Billing data. Subscriptions are handled by RevenueCat and Stripe. Card details go directly to Stripe; we never see or store card numbers. We keep only what we need to know which plan you are on.
  • Usage logs. Standard server logs (IP address, request path, timestamp) kept briefly for security and debugging.

Cookies and sessions

We use a session cookie to keep you signed in to your dashboard. That is it — no advertising cookies, no cross-site trackers, no third-party analytics scripts following you around the web.

Google user data

If you connect Google Search Console, WordPuppi requests read-only access via the webmasters.readonly scope. We use it solely to display your own search analytics — queries, clicks, impressions, and positions for your sites — inside your WordPuppi dashboard.

  • Your Google data is never sold, never used for advertising, and never shared with third parties.
  • No human reads it except where required for security, debugging with your consent, or by law.
  • Disconnecting the integration deletes the stored Google tokens immediately. You can also revoke access at any time from your Google account settings.

WordPuppi's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

Who processes data on our behalf

We use a small set of subprocessors, each only for its job:

  • Cloudflare — CDN, DNS, and DDoS protection in front of our services.
  • RevenueCat — subscription management.
  • Stripe — payment processing.
  • Postmark — transactional email delivery.
  • Contabo — server hosting, located in the EU.

We do not sell your data to anyone, ever.

Retention and deletion

We keep your data for as long as you have an account. Delete your account and we delete your account data, your content, and any connected-service tokens; residual copies in encrypted backups expire within 30 days. Server logs are rotated automatically after a short period. You can request deletion, or a copy of your data, by emailing us.

Your rights

You can access, correct, export, or delete your personal data at any time. Most of this you can do yourself from your dashboard; for anything else, email us and we will handle it promptly.

Changes to this policy

If we change this policy we will update the effective date above and, for material changes, notify you by email before they take effect.

Contact

Questions about privacy? Email [email protected].