Privacy Policy
1. Who is the controller of your data
ul. Lipowa 27, 55-040 Królikowice, Poland
NIP (Tax ID): PL9730825516
Contact: support@adsboxwp.com
For all questions related to your personal data or this Privacy Policy, please contact us at support@adsboxwp.com.
2. What personal data we collect
2.1 When you purchase a license
- Email address — provided at checkout, used to deliver your license key and for support correspondence.
- Billing information — full name, billing address, VAT ID (if you provide one) — collected and processed by Stripe.
- Payment details — card data is entered directly in Stripe's checkout form; we never see or store card numbers.
2.2 When you activate the Plugin on your WordPress site
- License key + site URL where the Plugin is activated.
- Plugin version and a timestamp of each activation / heartbeat.
- IP address of the server at the moment of activation — used for abuse detection only.
2.3 When you browse adsboxwp.com
- Server logs — access records (IP, user agent, URL visited, timestamp) kept for 30 days for abuse detection and debugging.
- Analytics data — see section 4 below on cookies and trackers.
2.4 When you email us
- Your email address and the contents of your message — stored in our mailbox for as long as needed to resolve your issue plus 2 years.
3. What we do NOT collect
The Plugin installed on your WordPress site does not track your end-user visitors. Impressions and clicks recorded by the Plugin are stored in your own WordPress database on your own server. Nothing about your visitors leaves your site and reaches us.
4. Cookies and trackers on adsboxwp.com
This website (adsboxwp.com) uses the following cookies and tracking technologies. On your first visit we show a cookie banner asking for your consent to non-essential trackers — you can change this choice at any time by clearing your browser cookies for this domain.
4.1 Essential cookies (always on, no consent needed)
- Session cookies (
abwp_admin,abwp_customer) — keep you signed in to the admin / customer panel. - CSRF tokens — security, prevent cross-site request forgery.
- Cookie consent state — remembers your choice so we don't re-ask on every visit.
4.2 Analytics cookies (only with your consent)
We use Google Analytics 4 (operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to understand how visitors use the website so we can improve it.
- Cookies:
_ga,_ga_*(valid up to 2 years). - Data collected: anonymised IP, pages visited, session duration, device type, approximate geolocation (country / region).
- Legal basis: your consent (Art. 6(1)(a) GDPR).
- Google's privacy: policies.google.com/privacy.
4.3 Marketing cookies (only with your consent)
We use Meta Pixel (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) to measure the effectiveness of our Facebook / Instagram advertising and to show relevant ads to people who visited our site.
- Cookies:
_fbp,_fbc(valid up to 90 days). - Data collected: pages viewed, button clicks, viewed products — sent to Meta in aggregated form.
- Legal basis: your consent (Art. 6(1)(a) GDPR).
- Meta's privacy: facebook.com/privacy/policy.
5. Why we process your data and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Fulfilling the purchase contract (delivering the license, invoices, support) | Art. 6(1)(b) — contract |
| Tax / accounting / bookkeeping obligations | Art. 6(1)(c) — legal obligation |
| License activation heartbeat, abuse detection, fraud prevention | Art. 6(1)(f) — legitimate interest |
| Analytics (Google Analytics) | Art. 6(1)(a) — consent |
| Marketing (Meta Pixel) | Art. 6(1)(a) — consent |
| Responding to your questions or legal claims | Art. 6(1)(b) / 6(1)(f) |
6. How long we keep your data
- Customer account + license records: as long as your license is active, plus 6 years afterwards (Polish tax / civil law).
- Invoices: 5 years from the end of the calendar year in which they were issued (Polish tax law).
- Server access logs: 30 days.
- Email correspondence: duration of the issue plus 2 years.
- Analytics data in Google Analytics: 14 months (default GA4 retention).
- Cookie consent state: 12 months then re-asked.
7. Who we share your data with (sub-processors)
| Service | What they process | Where |
|---|---|---|
| Stripe Payments Europe, Ltd. | Payment data, billing info, VAT | Ireland (EU) — privacy |
| Our hosting provider (LiteSpeed server in the EU) | Site files, SQLite database, email delivery (server SMTP) | EU |
| Google Analytics (Google Ireland Ltd.) | Anonymised analytics — only after your consent | Ireland / EU · privacy |
| Meta Pixel (Meta Ireland Ltd.) | Pixel events — only after your consent | Ireland / EU · privacy |
Email delivery (license keys, support replies) is handled through our hosting provider's SMTP server — no third-party email service (Resend, Mailgun, SendGrid etc.) is used.
8. Data transfers outside the EEA
Google and Meta may transfer data to the United States. Both are certified under the EU-U.S. Data Privacy Framework (DPF) and their data transfers are covered by Standard Contractual Clauses (SCC).
9. Your rights under GDPR
You have the right to:
- Access your personal data (Art. 15 GDPR).
- Rectify inaccurate data (Art. 16).
- Erase your data (Art. 17) — subject to our legal retention obligations.
- Restrict processing (Art. 18).
- Data portability (Art. 20) — we can export your customer + license data as JSON on request.
- Object to processing based on legitimate interest (Art. 21).
- Withdraw consent for analytics/marketing at any time — by clearing cookies or changing your browser settings.
- Lodge a complaint with the Polish supervisory authority: Urząd Ochrony Danych Osobowych (uodo.gov.pl).
To exercise any of these rights, email support@adsboxwp.com. We will respond within 30 days.
10. Changes to this Policy
We may update this Policy as the service evolves. Material changes will be announced by email to active license holders and posted here at least 14 days before they take effect.