Privacy Policy

This website and the Attributes User Access plugin are operated by Codex Riverain S.E.N.C., a partnership registered in Quebec, Canada. Throughout this policy, “we”, “us” and “our” mean that company.

Because we are established in Quebec, we are subject to Quebec’s Act respecting the protection of personal information in the private sector (as amended by Law 25) and to Canada’s PIPEDA. Where you are in the United Kingdom or the European Economic Area, the UK GDPR and the GDPR apply to you as well, and this policy is written to respect them.

It is a short list, and the shortest part of it is worth stating first.

What this website does not do

This site runs no analytics, no tag manager, no advertising pixel and no session recording. It sets no cookies and writes nothing to your browser’s local storage. Every font and asset is served from our own domain, so loading a page makes no request to any third party and gives no third party the chance to observe you.

What you give us, when you choose to

The support form is the only place on this site that asks you for anything. If you use it, you provide:

• check_circle
  Your name, as you enter it.
• check_circle
  Your email address, so a reply can reach you.
• check_circle
  The subject category you pick, and the message you write.

What happens next is unusual and worth being plain about: we do not store or transmit that message. The form validates what you wrote and hands it back to your own email client as a pre-filled message. Nothing is sent until you send it, and until then nothing has reached us. When it does reach us, it reaches us as ordinary email.

What the server sees in passing

To stop a script from hammering the form, the server keeps a short-lived list in memory of which IP addresses have submitted recently — five submissions per ten minutes are allowed. Entries expire on their own and the list does not survive a restart. It is never written to disk and never linked to anything else about you.

Our hosting provider, like any web host, keeps its own server logs. Those are operational records held by that provider under its own retention rules.

We use what you send us for these purposes and no others:

• check_circle
  To answer your request and diagnose the issue you report.
• check_circle
  To manage your account and licence, where you hold one, including activation and the sites you have registered.
• check_circle
  To send you service email you have asked for or that your purchase requires — updates and security notices, not marketing.
• check_circle
  To keep the service working: to maintain, secure and improve the plugin.

We do not sell your personal information, and we do not disclose it for anyone else’s marketing. We do not make decisions about you by automated means alone.

If that changes — should we ever add analytics or a checkout — this section will say so before it happens, and anything beyond what is strictly necessary will ask you first.

Our WordPress site — where you sign in, manage your account and buy a licence — is a separate property with its own cookie notice; this policy covers this site.

We share your personal information with nobody for their own purposes. It is passed on only in these circumstances:

• check_circle
  Service providers who run parts of our operation on our behalf — hosting, email delivery, and the payment and licensing provider — each bound to use it only for the service they provide us.
• check_circle
  Where the law requires it: a court order, a lawful request from a public authority, or the defence of a legal claim.
• check_circle
  To a successor entity, if the business is ever sold or reorganised, under the same commitments as this policy.

Purchases and licences for the Pro plugin are handled by our commerce and licensing provider, which processes the payment and holds the order record. We never see or store your full card details.

We keep personal information only as long as the purpose it was collected for requires, and then for whatever period the law obliges us to.

You may ask us to delete your personal information at any time, and we will do so except where the law requires us to keep it.

Whatever your jurisdiction, you may ask us to:

• check_circle
  Tell you what personal information we hold about you, and give you a copy.
• check_circle
  Correct anything inaccurate or incomplete.
• check_circle
  Delete it, where we have no overriding legal reason to keep it.
• check_circle
  Stop or limit a particular use, including withdrawing a consent you gave earlier.
• check_circle
  Receive it in a structured, commonly used format, or have it sent to another organisation.

Write to support@attributeswp.com and we will answer within 30 days. Exercising these rights costs nothing and we will not treat you differently for it.

If our answer does not satisfy you, you may complain to the Commission d’accès à l’information du Québec, to the Office of the Privacy Commissioner of Canada, or to your own supervisory authority if you are in the UK or the EEA.

We are based in Canada and your information is handled there. Some of the providers we rely on operate servers elsewhere, which means your information may be stored or processed outside your country, including in the United States.

Where we transfer personal information out of Quebec, we assess beforehand whether it will receive adequate protection, as Law 25 requires, and we use contractual safeguards — standard contractual clauses where those apply — to hold the recipient to it.

Everything travelling between your browser and this site is encrypted in transit over HTTPS. Access to what we hold is limited to the people who need it to do their work.

The strongest protection here is structural rather than technical: this site stores almost nothing. There is no visitor database, no analytics warehouse and no message archive, so there is very little to lose.

We should still be honest about the limit. No method of transmission over the internet and no method of electronic storage is completely secure, and we cannot guarantee absolute security. If a breach ever affects your personal information and presents a risk of serious injury, we will notify you and the appropriate authorities as the law requires.

This is a product for people who build and run websites, and it is not directed at children. We do not knowingly collect personal information from anyone under 14. If you believe a child has given us their information, write to us and we will delete it.

We may update this policy. The date at the top is the date of the current version. If a change materially affects how we handle your personal information, we will say so prominently rather than rely on you noticing the date.