The EWWW Image Optimizer (plugin and services) are provided by Exactly WWW LLC, located in the great state of Montana (USA). We do not rent or sell your information to anyone else. However, your information may be stored in systems that we do not own in the course of necessary business. Most information is stored indefinitely, unless you ask us to delete it, except as otherwise noted. The list below is current as of October 5, 2024.
Usage data and the free EWWW Image Optimizer
- The free version of the EWWW Image Optimizer is one of only two WordPress image optimization plugins that does not collect, send, or store any of your information by default.
- All data collected by usage tracking is completely anonymous. No email or personal IP address is collected, no exceptions!
- This is the most sensitive data we handle. In fact, we technically don’t handle it. When you purchase something on our site, card information is sent directly to Stripe, a secure payment processor. This is done using a JavaScript request directly from your browser to Stripe. It is not routed through our server, and thus is never stored on our server. Ever.
- If you use PayPal, they send us your name or business name, and your email address, which is no more than you’ve already provided at checkout.
Your physical address
- We don’t need your physical address, other than your country and zip/postal code. This is for validating your credit card information (via Stripe) and applying VAT.
- Our transaction database will store any address information you provide for the purpose of displaying it on your invoices. We have no intention of sending you mail, sorry!
Your email address
- We use FluentCRM (self-hosted) for all on-boarding emails and for sending you Tips & Updates. The on-boarding subscription is automatic (and non-marketing), but you may unsubscribe if you don’t like free advice. The Tips & Updates mailing list is optional, and can be selected at checkout.
- When you make a purchase, your email will be stored at ewww.io as part of your user account. This allows you to manage your purchased products, license keys, invoices, etc.
- Additionally, your email address is recorded in the license database, so that automated service notifications can be sent to you. There is no opt-out on these short of full account deletion, as it is purely transactional email: license activation, low credit notifications, and subscription reminders. We use Postmark for all transactional email messages, a product of Wildbit.
Cookies
- We use cookies primarily to prevent fraud, preserve your shopping cart, and to log you into your account at ewww.io. We also use them to track affiliate links, and that’s it!
Other
- Our website and documentation includes embedded content, like videos hosted on YouTube. Embedded content behaves in the exact same way as if you actually visit that external site. They may collect data about you, use cookies, and monitor your interaction with the content if you have an account and are logged into that external website.
- If you submit a question via the contact form or the help button, it will capture information about your browser, your IP address, and the page you are viewing. This helps so that we don’t tell you to go read something you already saw. The IP address and browser information allows us to assist you more quickly with purchase and login issues. This information, along with your message and email address will be stored in our Help Scout mailbox.
- All forms on this site are protected by Cloudflare Turnstile to prevent spam. If you have a problem with that, you may contact us directly for assistance.
- This site retains security logs of every log-in attempt made. This information, including the public IP address, username and the status of your attempt, is used to help prevent unauthorized system access and maintain a high quality of service for everyone. For additional security, this web-site participates in a community-sourced attack traffic monitoring and mitigation program. In other words, if you enter your password incorrectly too many times, we send your IP address to the Blobfolio server(s) so they can see if you are a hacker or not. If you do this on multiple sites that use the community blacklist, your IP address will be published to a publicly available blacklist. This data is only retained while relevant for security purposes and is automatically removed after 30 days.
- We use Stripe for payment services. Stripe collects identifying information about the devices that connect to its services and uses this information to operate and improve the services it provides to us, including for fraud detection. You can learn more about Stripe and read their privacy policy.
- All our Compress API servers are hosted in the United States. That means the files you submit for optimization will travel to the US, be optimized, sent back to you, and then deleted from our servers. The only time they are stored is if you enable the backup option. Then the files are stored for 30 days, and deleted. Files compressed on Premium Plus will be processed via our agreement with TinyPNG.
- Files compressed by Easy Image Optimizer will be stored on a global network of servers for up to one year. The front-end systems are powered by BunnyCDN and usage is subject to their privacy policy. You may purge all your files from our servers anytime you like. None of your personally identifiable information is transferred to BunnyCDN, and all IP addresses of visitors are anonymized.
- Currently, we use servers hosted by DigitalOcean and WP Engine. We aggregate our logs with Logz.
European residents
Please see our DPA which addresses the specific requirements and rights of EU residents under the GDPR.
- Special note about Easy IO CDN: if you host your website in Europe, then we process your images via Easy IO servers in Frankfurt, Germany. The access logs on these servers do not contain the IP addresses of your visitors, and the application logs have only anonymized IP addresses forwarded to our log aggregator. In order to prevent blockage by security services like Cloudflare, the visitor IP addresses are further randomized so that they will not match the original, but will be accepted as valid IP addresses.
We employ various security measures to ensure that no one gains unauthorized access to your information. If someone ever does hack our servers, we will contact you via email as fast as humanly possible.
This site does not specifically target or market to children under the age of 13 years old.
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obligated to keep for administrative, legal, or security purposes. Data erasure requests should also be sent via the contact page.
If you have other questions about information not covered here, send us an email and we’ll be glad to clarify.
