EU GDPR Compliance

Privacy Policy

Information pursuant to Articles 12, 13, and 14 of the EU General Data Protection Regulation (GDPR).

Crucial Privacy Architecture: 100% In-Admin Diagnostics

Unlike external SaaS monitoring services, phpinfo() WP is 100% self-hosted on your WordPress server. Your server configuration, PHP diagnostics, database schema indexes, user activity logs, and error logs are processed and rendered entirely within your local WordPress database and admin dashboard. They never leave your host and are never transmitted to phpinfo() WP or third-party servers.

1. Data Controller

The data controller responsible for the processing of personal data on this website under Article 4(7) GDPR is:

Inhaber / Owner: Emran Hossain Sagor
Founder & Lead Developer•phpinfo() WP
Software Studio & Development (Germany)
Registered Business Address
Peter-Hille-Weg 13
33098 Paderborn
Germany
Official Direct Contact

2. Web Hosting & Server Logs

Our website is hosted by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA).

When you access our marketing website, servers automatically log connection data transmitted by your browser:

  • IP address of the requesting device
  • Date, timestamp, and HTTP method of access
  • Requested URL path and resource
  • HTTP status code and payload size
  • User agent header (browser type, OS, and version)

Legal Basis: Art. 6(1)(f) GDPR (our legitimate interest in ensuring system security, prevention of DDoS attacks, and stable content delivery). Vercel is certified under the EU-US Data Privacy Framework (DPF) and complies with EU Standard Contractual Clauses (SCCs).

3. Payment Processing via Stripe

We process commercial software licenses and subscription checkouts through Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland).

When purchasing a license, transaction details (name, billing email, billing address, country, card details) are submitted directly to Stripe over TLS 1.3 encryption. We never see or store full credit card numbers or security CVV codes on our servers.

Legal Basis: Performance of a contract under Art. 6(1)(b) GDPR, and compliance with German tax and accounting retention requirements under Art. 6(1)(c) GDPR (§ 147 German Fiscal Code / AO).

4. License Key Issuance & Support Correspondence

Upon order completion, we record your purchase email address, issued license key, and plan tier (Single Site, Unlimited, Lifetime) in our secure license verification system to validate automated plugin updates and support eligibility (Art. 6(1)(b) GDPR).

When you contact support, your email and conversation context are retained solely to resolve technical queries and maintain warranty records (Art. 6(1)(f) and Art. 6(1)(b) GDPR).

5. Analytics & Cookies (Google Analytics 4 / Consent Mode v2)

We use Google Analytics 4 (Google Ireland Limited) to evaluate anonymous, aggregated visitor traffic to improve our software documentation and UX.

We implement Google Consent Mode v2. Analytics cookies remain strictly disabled until you explicitly provide opt-in consent via our consent banner.

CookiePurposeLifespan
_gaDistinguishes unique website visitors anonymously2 years
_ga_*Maintains session state and page view counters2 years

Legal Basis: Art. 6(1)(a) GDPR (Consent). You can modify or revoke consent at any time:

6. Your GDPR Rights (Articles 15-21)

Under the GDPR, you have the right to:

  • Access (Art. 15): Request confirmation and copies of personal data held about you.
  • Rectification (Art. 16): Correct inaccurate or incomplete records.
  • Erasure (Art. 17): Request deletion of your personal data where legal retention permits.
  • Restriction (Art. 18): Restrict the processing of your data under statutory criteria.
  • Data Portability (Art. 20): Receive your personal data in structured machine-readable format.
  • Objection (Art. 21): Object to processing based on legitimate interests.

To exercise any right, contact: support@phpinfowp.com.

7. Competent Supervisory Authority

You have the statutory right under Article 77 GDPR to file a complaint with a data protection supervisory authority. Our competent regional authority is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2-4, 40213 Düsseldorf, Germany
Website: https://www.ldi.nrw.de

Last updated: 14 September 2026