Privacy Policy

Last updated: October 18, 2026

WPCoreTools ("we", "us", or "our") operates the wpcoretools.com website and develops WordPress plugins. The data controller is Zoniax OÜ, a company registered in Estonia (registry code 16853667), which operates WPCoreTools. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our plugins.

1. Information We Collect

1.1 Website Visitors

This website is a static site hosted on Cloudflare Pages. Like any web host, Cloudflare keeps standard server request logs when you load a page, including:

  • IP address
  • Browser type and version (user agent)
  • The URL you requested and the time of the request

We run no analytics, set no cookies and load no tracking scripts. The site has no accounts, no checkout and no mailing list.

1.2 Plugin Users

Our WordPress plugins are designed with privacy in mind. They are free, and none of them has a licence key, an account or a usage tracker. Here is what each plugin stores and sends:

Speedix: All profiling data is stored locally in your WordPress database. No data is transmitted to our servers, and there is no tracking or telemetry. The plugin analyzes your site's performance entirely within your hosting environment. One exception: its "More tools" admin page, which only appears inside your WordPress admin, loads three plugin icons from WordPress.org (ps.w.org), so your browser makes a request to that server when you open the page.

Tidy Media: Scan results and the quarantine list are stored in your WordPress installation. The page and download checks only request pages and files of your own site, and only when you click the button. Nothing is sent to our servers or to any other server.

WPCoreTools Disposable Email Guard: Email addresses are checked on your own server against domain lists that ship inside the plugin, so no email address is sent to a third-party service. The detection log stores the email address, domain, reason and IP address in your own database for admin review; you choose how long it is kept (7 to 365 days, default 90). The optional list auto-update, which is off by default, sends a plain request to raw.githubusercontent.com without any email address, user data or your site URL.

WPCoreTools Email Verify: The plugin contacts no outside service and collects no usage data. Confirmation emails are sent by your own WordPress mail system. The resend form's rate limit stores only a hash of the visitor's IP address, for one hour. It supports the WordPress personal data export and erase tools.

1.3 Information You Provide

We may collect information you voluntarily provide, such as:

  • Email address (if you contact support)
  • Name and contact information (if you submit a support request)
  • Any other information you choose to provide

The contact form sends the name, email address, plugin and message you type, and any file you attach, to FormBlade, a form backend we run ourselves. It stores the message so that we can answer it and emails it to us. The page loads nothing from FormBlade until you press Send, so reading this site still tells them nothing about you.

2. How We Use Your Information

We use the information we collect to:

  • Answer your support emails and contact form messages
  • Keep the website running and secure

3. Data Storage and Security

Plugin data is stored on your own WordPress hosting environment. We do not have access to your WordPress installation or the data generated by our plugins.

We keep support emails only as long as needed to answer you and handle any follow-up, and we delete them when you ask. Server request logs are kept by Cloudflare under its own retention rules.

4. Third-Party Services

This website and our plugins may interact with the following third-party services:

  • Cloudflare: Hosts and delivers this website, and therefore receives the IP address and request details of everyone who loads a page. See Cloudflare's privacy policy (opens in a new tab).
  • WordPress.org: Plugin updates are delivered through the standard WordPress.org update mechanism. Speedix's "More tools" admin page also loads three icons from WordPress.org.
  • FormBlade (formblade.com): Our own form backend. It receives a message only when you send the contact form, stores it, and emails it to us.
  • GitHub (raw.githubusercontent.com): Only if you turn on the optional list auto-update in Disposable Email Guard, or click its "Update now" button. The request is empty and carries no email addresses, user data or site URL.

We do not sell, trade, or otherwise transfer your information to third parties for marketing purposes.

5. Cookies

This website sets no cookies and uses no analytics. Our plugins set no cookies on your visitors' browsers.

6. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

  • Access: Request a copy of the information we hold about you
  • Correction: Request correction of inaccurate information
  • Deletion: Request deletion of your information
  • Objection: Object to processing of your information
  • Portability: Request transfer of your information

To exercise these rights, please contact us using the information below. You also have the right to complain to a data protection supervisory authority. For Zoniax OÜ this is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee (opens in a new tab)), or the authority in your own country.

7. Children's Privacy

Our website and plugins are not intended for children under 16. We do not knowingly collect information from children under 16.

8. International Data Transfers

If you access our website from outside our operating country, your information may be transferred to, stored, and processed in a country with different data protection laws.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Zoniax OÜ, Estonia
Our contact form, or support@wpcoretools.com.

11. GDPR Compliance (EU Users)

For users in the European Union, we process personal data under the following legal bases:

  • Legitimate interest: Server request logs, which are needed to deliver and secure the website
  • Legitimate interest: Reading and answering the support emails you send us

Our plugins are designed to help you maintain GDPR compliance by storing data locally and minimizing external data transfers.