Privacy Policy

1. Who we are

Stack Guard is a WordPress security plugin made by Stack Mode LLC (“Stack Mode”, “we”, “us”), 5470 Kietzke Ln, Ste 300, Reno, NV 89511. This policy covers this website, wpstackguard.com, our sales and licensing, and the Stack Guard plugin itself.

Questions or requests: hello@wpstackguard.com.

2. The short version

• We do not sell personal information, and we do not use it for advertising.
• This website sets no tracking or advertising cookies. It counts visits with cookieless, anonymous analytics.
• The plugin keeps your site's security data in your own WordPress database. We cannot see it.
• Google Drive backups are coming soon to Pro. When you connect Drive, your files go straight from your site to your own Drive. We never see them and we store no Google tokens.

3. This website

Visiting the site

The site is hosted by Vercel. Like any web host, Vercel processes your IP address, browser details and the pages you request to deliver the site and protect it from abuse, and keeps short-lived server logs. We count page views and a few button clicks (such as Download and Buy) with Vercel Web Analytics, which uses no cookies and does not identify you or follow you across sites. We do not use tracking pixels or advertising cookies.

Contact form and email

When you use a form on this site or email us, we receive what you send: your name, email address and message, or just your email address for security alerts. Form messages are stored in Stack Mode's own business system so we can reply and keep a record of the conversation. We use them only to answer you, send the alerts you asked for, and support your account. You can unsubscribe from alerts at any time.

Free security check

When you use the WordPress security check, our server fetches the public pages of the address you enter, as any visitor would, and shows you the result. We do not store the address or the result, and we count only that a check was run and its score.

Buying a plan

Checkout is handled by Stripe. Stripe collects your card or bank details directly; we never see or store full payment details. We receive your name, email address, billing country, what you bought and the payment status. We use these to issue and email your licence key, run your customer account, handle renewals, refunds and support, and keep the records tax law requires.

Your customer account

Your account holds your email address, licence keys, purchases and the sites each licence is active on. You sign in with a link sent to your email address.

4. The Stack Guard plugin

Stack Guard runs on your WordPress site. The security data it creates, such as sign-in attempts, lockouts, the activity log, visitor IP addresses, scan results and backups, is stored in your own WordPress database and files. It is not sent to us. You, as the site owner, decide how long it is kept; the plugin has retention settings for each kind of record.

The plugin contacts outside services only for the features below, most of which you switch on yourself:

The plugin can also email you alerts and digests. Those are sent by your own site's mail setup to the addresses you choose. The optional “protected by Stack Guard” badge links to this website with campaign tags that say where the click came from; it sends nothing on its own.

If you install Stack Guard on a site you run for others, you are responsible for telling your visitors and users about the data your site handles, including the security records listed above.

5. Google user data (Google Drive backups)

Google Drive backups are coming soon to Pro. Once available, Stack Guard saves backups to your own Google Drive. When you choose Connect Google Drive in the plugin, you sign in with Google and grant these permissions:

• drive.file: create and open only the files and folders Stack Guard itself creates in your Drive. Stack Guard cannot see or change any other file in your Drive.
• openid and email: your Google account's email address, shown in the plugin so you can see which account backups go to.

How we use it

• Backup files are uploaded from your WordPress site straight to your Drive, and downloaded straight back from Drive when you restore. They never pass through our servers.
• Google sign-in is completed by a small Stack Guard service at auth.wpstackguard.com. It holds our Google app credentials, finishes the sign-in and hands an encrypted access key back to your site. It does not store tokens, does not log them and never sees backup files. Temporary sign-in state is deleted as soon as it is used and expires after 10 minutes in any case.
• The long-lived Google access key (refresh token) is stored only on your own site, encrypted. When your site needs to upload or download, it asks the service to exchange that key for a short-lived one. That exchange is not stored.
• We use Google user data only to provide the backup and restore feature you asked for. We do not use it for advertising, do not sell it, do not use it to train AI models, and do not let people read it, except where you ask us for help and give permission, where it is needed for security, or where the law requires it.

Stack Guard's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting

Choose Disconnect in the plugin's backup settings. The plugin asks Google to revoke its access and deletes the stored key from your site. You can also remove Stack Guard at any time from your Google account's third-party connections page. Backup files already in your Drive stay there until you delete them.

6. Who we share information with

We share personal information only with service providers who help us run the business, under contracts that limit what they can do with it:

• Vercel, for website hosting.
• Stripe, for payments.
• Our email provider, to send licence keys, receipts and replies.
• Google, only as described in the Google Drive section, and only when you connect Drive.

We may also disclose information if the law requires it, to protect people or our rights, or as part of a sale or merger of the business, in which case this policy continues to apply.

7. How long we keep it

• Customer, purchase and licence records: for as long as you have an account, then as long as tax and accounting law requires (usually seven years).
• Messages to us: for up to three years after the conversation ends, unless they are part of a customer record.
• Hosting logs: kept by Vercel for a short period, usually days.
• Data in the plugin: on your site, for as long as you choose.

8. Security

Everything we run is served over HTTPS. Licence keys are emailed once and cannot be read back by our staff. Access to customer records is limited to the people who need it. No system is perfectly secure, so if you believe you have found a problem, please tell us through our vulnerability disclosure page.

9. Your choices and rights

You can ask us to show you, correct, export or delete the personal information we hold about you, or to stop using it for a purpose, by emailing hello@wpstackguard.com. We will answer within 30 days. We may keep records we are required to keep by law, such as invoices.

Depending on where you live, laws such as the GDPR, the UK GDPR and US state privacy laws give you these rights and the right to complain to your data protection authority. We do not sell or share personal information for cross-context behavioral advertising.

10. Children

Stack Guard is a tool for website owners. It is not meant for children under 16, and we do not knowingly collect their personal information.

11. International transfers

We are based in the United States, and our providers may process information in the United States and other countries. Where the law requires it, we rely on safeguards such as the European Commission's standard contractual clauses.

12. Changes to this policy

We will post any change here and update the date at the top. If a change is significant, we will email customers before it takes effect.

13. Contact

Stack Mode LLC, 5470 Kietzke Ln, Ste 300, Reno, NV 89511. Email hello@wpstackguard.com.