Last updated: 09/27/2025
Controller: JORIS CLERY EI, registered in France under number 844 893 123 00019, with registered office at 67 rue Jean de Cambiaire, 97480, Saint-Joseph, Réunion, France (“we”, “us”, “our”).
Contact (privacy/DPO): contact@pluginsupercharger.com
Hosting provider: OVH Groupe SA, 2, rue Kellermann, 59100 Roubaix.
Applicable law: EU GDPR and French data-protection law (Loi Informatique & Libertés).
1) Scope
This Policy explains how we collect and process personal data when you browse our website, purchase and activate Plugin Supercharger, use our support, and interact with our services.
2) Categories of Data We Collect
- Account & billing data: name, company, VAT number, postal address, country, email, phone (optional), order/transaction identifiers, invoices, license key(s).
- Technical & usage data: IP address, device information, browser/user-agent, OS, referral/UTM, timestamps, error logs, crash reports, update/install events, activation/validation status.
- Performance/telemetry (with consent): limited one-time page-load measurements and URLs of measured pages to provide before/after reporting and product improvement.
- Support data: content of tickets, attachments, diagnostic information you choose to share.
- Marketing preferences: opt-in/opt-out choices, communication history.
3) Purposes and Legal Bases
- Contract performance (Art. 6(1)(b) GDPR): purchase processing, license issuance/validation, delivery of downloads/updates, support.
- Compliance (Art. 6(1)(c)): invoicing, accounting, tax records.
- Legitimate interests (Art. 6(1)(f)): service security (fraud/spam prevention), product improvement, statistics in strictly necessary form, defense of legal claims.
- Consent (Art. 6(1)(a)): non-essential cookies/trackers (e.g., Google Analytics), marketing communications, and performance measurements performed from the admin interface. You may withdraw consent at any time without affecting prior processing.
4) Google Services We Use
We use Google services to improve user experience and reliability. Depending on your configuration, the following may operate on our site or within the plugin’s admin interface:
- Google Analytics (GA4): audience measurement and aggregated usage insights. We operate it on a consent basis via our cookie banner. We configure data retention and, where available, IP anonymization.
- Google Tag Manager: container to deploy tags; it does not by itself collect personal data beyond what is necessary to load tags.
- Google reCAPTCHA: bot/spam protection on forms; collects device and interaction data to distinguish humans from bots.
- Google Fonts / APIs: delivery of fonts or assets; your IP may be processed to serve content.
International transfers: Where Google stores data outside the EEA, transfers rely on the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses (SCCs) with supplementary measures, as applicable.
5) Cookies and Similar Technologies
We use:
- Strictly necessary cookies: essential for login, license/account area, checkout.
- Analytics cookies (consent-based): GA4 for aggregated statistics.
- Functional/performance cookies (consent-based): to remember choices and enhance UX.
You can manage preferences through our cookie banner (and your browser settings). Refusing non-essential cookies does not affect essential features.
6) Data Sources
Data comes directly from you (checkout, support, admin interface), from your device (technical data), from our payment service providers ([Stripe/PayPal – replace as applicable]), and from our plugin’s measurement features when you opt-in.
7) Disclosures and Recipients
We share data only as necessary:
- Payment processors: [Stripe/PayPal, address] for payments and fraud prevention.
- Hosting/CDN & infrastructure: [providers] for secure hosting and delivery.
- Analytics & UX tools: Google services listed above (consent-based for non-essential).
- Customer support/CRM & emailing: [provider(s)] to communicate with you.
- Professional advisers & authorities: as required by law or to establish/exercise/defend legal claims.
We do not sell personal data.
8) Retention
- Invoices & accounting records: up to 10 years (French law).
- License keys & order metadata: duration of license + up to 3 years (claims limitation).
- Support tickets: up to 3 years after closure (or 5 years if legal archiving is needed).
- Server logs & security events: 6–12 months unless needed longer for investigations.
- Analytics data: per GA4 settings (e.g., 14 months) or shorter where configured.
When no longer needed, data is securely deleted or anonymized.
9) Security
We apply organizational and technical measures appropriate to risk (access controls, encryption in transit, hardened hosting, least-privilege, backups). No system is 100% secure; you remain responsible for maintaining secure environments and backups on your infrastructure.
10) Your Rights (EU/France)
You may exercise:
- Access, rectification, erasure (right to be forgotten), restriction, and portability.
- Objection to processing based on legitimate interests and to direct marketing.
- Withdrawal of consent at any time for consent-based processing.
To exercise, contact us at contact@pluginsupercharger.com
You may lodge a complaint with the CNIL (www.cnil.fr) or your local supervisory authority.
11) Children
Our services are not directed to children. We do not knowingly collect data from persons under 15. If you believe a minor has provided data, contact us to delete it.
12) Business Transfers
In case of merger, acquisition, or asset transfer, personal data may be transferred under appropriate safeguards and you will be informed where required by law.
13) Changes to This Policy
We may update this Policy periodically. The date at the top indicates the latest version. Material changes will be notified on our site and, where required, by email or within the product.
14) Additional Information for Plugin Users
- License validation: when you activate the Plugin, we process your license key, order identifier, and account email to validate your license and deliver updates/support (contract).
- Performance measurements (optional): if you opt in from the admin screen, the Plugin may send a one-time snapshot of page-load metrics and the URLs measured to our API to compute and display before/after results (consent).
- Hashed site identifier: where possible, we use a hashed site identifier for linkage while limiting direct identification.
Contact (privacy/DPO):
JORIS CLERY EI, registered in France under number 844 893 123 00019, with registered office at 67 rue Jean de Cambiaire, 97480, Saint-Joseph, Réunion, France
Email: contact@pluginsupercharger.com
Supervisory authority (France): CNIL – www.cnil.fr