Privacy and retention

Local data

• Keyed identifiers and masked hints, never raw card data or request bodies
• Aggregate Activity and temporary block records
• Optional exact-IP/narrow-CIDR/authenticated-user exemptions
• Temporary keyed order feedback bounded by Activity retention
• Local settings, health, and incident state

Retention and control

• Activity and terminal blocks: 1, 3, or 7 days
• Masked block hints: 7, 30, or 90 days
• Premium intervention analytics: up to 90 days while entitled
• WordPress email erasure removes directly attributable records
• Uninstall preserves by default; explicit administrator opt-in enables full purge

External data

Freemius is optional for Free and requires explicit connection. Turnstile or reCAPTCHA loads only when selected, configured, and locally required. The local challenge and support snapshot make no Codeprint scoring request.