Legal
Privacy policy
What we collect, why we collect it, and who we share it with. Spoiler: very little, for fulfillment only, almost no one.
Last updated: 2026-05-22
What we collect
- Email address. Required to send your receipt, license key, and download link.
- Billing details. Handled entirely by Stripe. We store only the Stripe customer ID and the last four digits of your card for receipt display.
- Purchase records. Plugin slug, amount, currency, timestamp.
- Download events. Coarse IP and user-agent for abuse detection on signed download URLs. Retained for 30 days.
- License activation data. When you activate or validate a plugin license, the plugin sends your license key and a salted, non-reversible hash of a machine identifier to our licensing provider (Lemon Squeezy) over HTTPS, solely to enforce your per-seat activation limit and prevent piracy. Lawful basis: performance of contract and our legitimate interest in preventing unlicensed use.
What we do NOT collect
- We do not run analytics scripts that track you across the web.
- We do not collect editing telemetry from the plugins — no footage, no project contents, no usage analytics. The only network call a plugin makes is the license activation/validation described above.
- We never sell, rent, or trade your data.
Subprocessors
- Lemon Squeezy— merchant of record for checkout, license-key issuance and validation, and secure file delivery (runs payments on Stripe's infrastructure). Receives your email, payment details, license key, and a hashed machine identifier at activation.
- Stripe — payment processing (PCI-compliant; we never see card numbers).
- Cloudflare R2 — plugin binary storage and signed download URLs.
- Resend — transactional email (receipts, license keys, downloads).
- Vercel — website hosting and serverless functions.
- Neon — Postgres database for purchases and licenses.
- Clerk — admin authentication for the team.
Your rights
You can request access to, correction of, or deletion of your data by emailing support@pluginsnacks.com. We'll respond within 14 days. Note that we keep purchase records for accounting purposes for as long as required by tax law (typically 7 years).
Cookies
We use a single strictly-necessary cookie for the Stripe Checkout flow. No tracking cookies, no advertising cookies, no third-party analytics.
Children
The site and plugins are not directed at children under 13. We do not knowingly collect data from anyone under 13.
Changes
We'll update this page if our practices change. Material changes will be emailed to existing customers.