Privacy Policy

The short version

We sell nothing, we share nothing, and we track nobody across the web. Our plugins send us nothing on their own: a report leaves your site only when you write one and tick the consent box, every single time. No content from your site is ever transmitted.

If you only read one section, read what a feedback report contains.

Who we are

The identity of the publisher and data controller is set out at the end of this page. You can reach us by email for anything described here, including a request to delete your data.

What this policy covers

It covers this website, doubleyoupi.com, and the feedback service our WordPress plugins talk to at doubleyoupi.com/api/v1/feedback.

It does not cover what our plugins do inside your own WordPress site. Folders, collections, settings and media stay in your database and on your server. We have no access to them.

When you browse this site

Audience measurement. We use Matomo, which we host ourselves on stats.doubleyoupi.com. It runs without cookies, we anonymise addresses by dropping the last two bytes, and we honour the Do Not Track setting of your browser. We build no profile and follow you across no other site. There is no Google Analytics here, and no advertising or social network script.

Server logs. Our host records the usual web server logs: address, date, page requested, browser. They exist for security and troubleshooting.

Delivery network. Cloudflare sits in front of the site, so requests pass through its network on the way to us.

When you write to us through this site

The Kits mailing list. We store the email address you give us, the language you were reading in, and the date. We use it for one thing: telling you when the kits are ready. Ask us and we remove you, immediately and without asking why.

The feedback form. We store the product concerned, the kind of feedback, an optional rating, your message, the language, and your email address if you chose to leave one.

What a feedback report contains

Our plugins can show a Feedback tab in the WordPress admin. It is the only thing in them that ever contacts us, and it never acts on its own. Nothing is sent until you write a message and tick the consent box, and the dialog lists what will be sent, with a preview of the exact data before you decide.

A report contains:

• The message you wrote.
• The screenshot, if you attached one.
• The admin screen you were on: its title and its address within the admin, for example /admin.php?page=wc-orders. Security tokens and search terms are stripped out first.
• Which plugin, theme, or part of WordPress that screen belongs to, and its version. We detect this automatically so we know where to look, and we report the detection rather than asking you.
• Which of our products you were using, its version, and whether it is the standalone or the suite build.
• Your WordPress and PHP versions, the admin language, whether the site is a multisite, and the name and version of your active theme.
• Your browser identification, the size of your window, and whether the admin is in light or dark mode.
• A site identifier: a shortened SHA-256 hash of your site address. It lets us see that several reports come from the same installation. It cannot be turned back into your address.
• Your email address and your site address, only if you tick the box asking us to reply.

A report never contains your posts, pages, media, users, passwords, database, or any other content from your site. It never contains your site address unless you asked for a reply. There is no background telemetry, no usage statistics, and no collection of any kind outside the action described above.

Where this data is kept

Reports and sign-ups are written as files into a private Git repository hosted by GitHub, Inc., in the United States, and are sent to us by email at the same time. Screenshots are kept on our own server's disk and are never put in the repository. The site and its mailbox run on O2switch, in France. Our mailbox forwards to a Google mailbox, so Google handles those messages as well.

One person has access to all of it. We do not sell it, rent it, or hand it to anyone else, and we use no advertising or profiling service.

How long we keep it

• Feedback, whether sent from a plugin or from this site: 24 months from the day we receive it, then deleted, screenshot included.
• Mailing list: until you unsubscribe.
• Server and analytics logs: our host's standard retention.

Your rights

You may ask for access to your data, for its correction, or for its deletion. You may object to its processing and ask for it in a portable form. Write to the address at the end of this page and we will answer within a month.

One practical point. If your request concerns a report sent from a plugin, include the reference we showed you when you sent it, which looks like fb_20260921T124105_047b96. Because we deliberately do not store your site address, that reference is often the only way we can find your report.

If you think we have handled your data badly, you may complain to the CNIL, the French data protection authority.

Children

Our products are made for people who build websites for a living. They are not aimed at children, and we do not knowingly collect anything from anyone under sixteen.

Changes to this policy

The date of the current version is at the top of this page. If we change something that matters, we will say so on the blog rather than quietly editing this page.