Privacy Policy
Last updated: October 20, 2026
In order to ensure confidentiality and lawful processing of its visitors' personal data, AffKraft conducts its activities in strict compliance with the requirements set in GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
TL;DR.
We store your email address, what you've bought, and the websites your licenses are activated on. This data is not sold or rented, and it's only shared with the services listed below that we need to run the shop.
This website doesn't track you. We count visits with Plausible, a privacy-friendly analytics tool that uses no cookies and collects no personal data. There are no ads and no third-party cookies. The only cookie is the one that keeps you signed in.
What we collect
- Your email address, when you buy something, sign in, or join the newsletter. We use it to create your account and send you sign-in links.
- Purchase details that Lemon Squeezy or NOWPayments send us after a payment: what you bought, when, the price, your country, and payment and subscription IDs. Your card details never reach us.
- License activations: when you activate a license, our themes and plugins send us the address of the website they're installed on, so we can check the license and deliver updates. We don't store that address.
- Correspondence: if you email or message us, we keep that conversation so we can help you.
- Product feedback: if you rate a product on the feedback form, we keep the rating and your message with your account.
- Server logs: like any website, requests pass through our hosting provider, which briefly logs technical data such as IP addresses to keep the service running and secure.
How we use it, and why we're allowed to
- To deliver what you bought: your account, downloads, licenses, updates and support. This is necessary to perform our contract with you.
- To tell you about changes to the products you use, such as important updates, and to keep the service secure. This is our legitimate interest.
- To send the monthly newsletter, only if you signed up for it. This is based on your consent, and every newsletter has an unsubscribe link.
- To keep purchase records we're required to keep by law.
Third-party services
We only share data with these services, and only what each one needs:
Payment processing
Card, PayPal, Apple Pay and Google Pay purchases and subscriptions on this website are handled by our online reseller Lemon Squeezy. Lemon Squeezy is the Merchant of Record for these orders, and collects your name, billing details and payment information under its ownPrivacy Policy (opens in a new tab).
Cryptocurrency payments are handled by NOWPayments.io. We don't send them your personal information. You pay on their page, under theirPrivacy Policy (opens in a new tab).
We send sign-in links, receipts and newsletters through Resend.com. Resend keeps logs that include email addresses, and these are deleted after 30 days.
Analytics
We use Plausible to count page views on this website and our docs. It sets no cookies, collects no personal data and doesn't follow you across other websites. The counts go through our own domain, which passes your IP address and browser version on to Plausible so it can tell visitors apart. Plausible doesn't store them: it keeps only a daily-changing anonymous identifier.
Hosting
This website and our license and update service run on Cloudflare, which stores our database and product files.
Some of these services are based outside the EU. Where that's the case, data is transferred under the safeguards the GDPR requires, such as Standard Contractual Clauses.
Cookies
When you sign in, a cookie is stored on your browser to keep you signed in. It contains a random session identifier and no personal information, and it's removed when you sign out. A second cookie only tells our pages that you're signed in (so they can show your account link), and a third briefly remembers which page to open after you sign in. Neither contains personal information. No other cookies are set by this website, so there's no cookie banner.
How long we keep it
- Your account, purchases and license activations: for as long as you have an account. When you delete it, payment records are kept without your email, because tax law requires it.
- Emails and messages: as long as they're useful for helping you, and deleted with your account.
- Product feedback: until you delete your account, when it's deleted with it.
- Newsletter: until you unsubscribe.
Your rights
You have the right to access the personal data we hold about you, and to have it corrected, deleted or exported. You can also object to or restrict how we use it, and withdraw consent (for example, by unsubscribing) at any time. You can delete your account yourself on your account page("Delete account"): your licenses expire immediately, and backups holding your data are deleted within 30 days. For anything else, contact us. If you think we've handled your data wrongly, you can also complain to the data protection authority in your country.
California residents (CCPA)
We don't sell or share your personal information, and never have. We don't use it for advertising and don't collect anything sensitive. If you're in California, you can ask what we hold about you, and ask us to correct or delete it, the same as anyone else: contact us, or delete your account yourself on your account page. Using these rights won't affect how we treat you.
Changes to this privacy policy
Any changes we may make to this privacy policy in the future will be posted on this page. For some cases, where appropriate, you will be notified by e-mail about those changes. However, you should check this page regularly if you want to keep up to date with any changes.
Questions and contact information
For any inquiry regarding data protection or privacy, please get in touch.