Legal
Privacy Policy
Last updated
This policy explains what personal data the FlowWP website (www.flowwp.net) collects, why, and what you can do about it. It covers this website only. The FlowWP plugin runs on your own WordPress site and is described in its own section below.
Who we are
This website is run by FlowWP, the maker of the FlowWP plugin for WordPress, and FlowWP is the controller of the personal data described here. To ask anything about your data, or to use any of your rights, write to us through the contact form.
In short
- You can read the whole site without giving us any personal data. There are no accounts.
- Analytics run only if you click Accept on the cookie banner, and never for advertising.
- If you write to us through the contact form, we keep your message so we can reply.
- Purchases of FlowWP Pro are handled by Freemius, under its own privacy policy.
- We do not sell personal data, and we do not use it for advertising.
Analytics, only with your consent
We use Google Analytics 4 to understand how the site is used: which pages are read, which buttons are clicked, which plans are looked at, and where visits come from. Nothing loads, and nothing is sent to Google, until you choose Accept on the cookie banner. If you choose Decline, or make no choice, Google Analytics does not run.
When it runs, Google Analytics receives the pages you visit, the buttons and plans you click, your browser, device and approximate location (country or city, which Google derives from your IP address; Google Analytics 4 does not store IP addresses), and the site that referred you. We have turned off Google’s advertising features: advertising storage and ad personalisation are always denied, and Google signals are not used. Google Analytics data is kept for no longer than 14 months.
Google acts as our processor for this data and may process it outside your country, including in the United States. See Google’s privacy policy and how Google Analytics safeguards data.
Legal basis: your consent. You can withdraw it at any time.
Cookies and storage
| Name | Purpose | Set by | Kept for | When |
|---|---|---|---|---|
flowwp_consent |
Remembers whether you accepted or declined analytics. Stored in your browser (local storage), not sent to us. | FlowWP (first party) | Until you clear your browser’s site data | Always, once you choose |
_ga |
Tells Google Analytics that two visits come from the same browser. | Google Analytics (first-party cookie) | 2 years | Only after you accept |
_ga_<ID> |
Keeps track of the current session for Google Analytics. | Google Analytics (first-party cookie) | 2 years | Only after you accept |
The site sets no other cookies, and none for advertising.
Changing your choice
Use Cookie settings at the bottom of any page to see the banner again and change your answer. If you decline after having accepted, the site stops sending data to Google Analytics and removes its _ga cookies from your browser.
The contact form
When you send a message through the contact form, we collect your name, your email address, the topic you pick and your message. We use them only to read and answer your message and to follow up on it.
The message is stored, privately, in the WordPress site that holds this website’s content, and a copy is emailed to us so we can reply. To stop automated spam, the site briefly uses your IP address to limit how many messages can be sent in a few minutes. It is held in the web server’s memory for that purpose only and is not stored with your message.
We keep messages for as long as we need them to deal with your enquiry and any follow-up, and you can ask us to delete yours at any time.
Legal basis: our legitimate interest in answering the people who write to us, and in keeping the form free of spam.
Hosting and server logs
The website is hosted by Vercel, and the content system behind it, including the stored contact messages, by Hostinger. Like any web host, they process the technical details of each request, such as your IP address, the page asked for, the time and your browser, to deliver the site and keep it secure, and they may keep them in server logs for a limited time. The site’s fonts are served from www.flowwp.net itself, so reading the site does not contact any other service before you choose on the cookie banner.
Legal basis: our legitimate interest in running a secure, working website.
Buying FlowWP Pro
Plans are sold through Freemius, which runs the checkout, payments, invoices and licences as the seller of record. When you choose a paid plan, you leave this site for Freemius’s checkout, which handles what you enter there, including payment details, under the Freemius privacy policy. We never see your payment details. Freemius shares with us what we need to provide your licence and support you, such as your name, email address and the plan you bought.
The FlowWP plugin
This policy covers the website. The FlowWP plugin runs on your own WordPress site, and your workflows and their data stay there: the plugin does not send them to us. What the plugin itself sends, and when (only to Freemius, and to any address you give an HTTP Request step), is set out under External services on the plugin page. The free plugin is distributed by WordPress.org, under WordPress.org’s own privacy policy.
Links to other sites
The site links to other websites, such as WordPress.org, Freemius and the products we compare FlowWP with. Their own privacy policies apply once you are there.
Your rights
Depending on where you live, including under the GDPR in the European Union and the UK GDPR, you have the right to:
- ask for a copy of the personal data we hold about you;
- have it corrected or deleted;
- object to, or ask us to restrict, how we use it;
- receive it in a portable format;
- withdraw your consent to analytics at any time, from Cookie settings, without affecting what happened before;
- complain to your data protection authority.
To use any of these rights, write to us through the contact form. We will answer within one month.
Children
The site is meant for people who build and run WordPress sites. It is not directed at children, and we do not knowingly collect personal data from anyone under 16.
Changes to this policy
If what the site does with personal data changes, we will update this page. The date it was last changed is shown at the top.