Privacy Policy

Last updated 5 October 2026

BossMage is operated from the United Kingdom ("we"). This policy covers two things: what the BossMage plugins (BundleBoss and AddOnBoss) do with data on the stores that install them, and what we collect from you as a customer or visitor.

The plugins on your store

The free BossMage plugins do not collect, store or transmit any personal data. In particular:

• They make no external requests, set no cookies, and contain no telemetry, analytics or tracking of any kind.
• Your customers' selections (which products, quantities and options they picked) are stored only as part of their cart and order, which is standard WooCommerce order data under your control. It is removed whenever you erase the order.
• Shareable build links encode choices in the URL itself. Nothing is stored on your server and the links contain no personal information. Like any URL, they may appear in standard server logs.

For data on your store, you are the data controller and the plugin acts entirely within your WordPress installation.

What we collect from you

If you buy a Pro licence, the purchase is processed by Freemius, our reseller and merchant of record. We do not see your payment card details. Freemius shares with us the information needed to provide the licence and support: your name, email address, site URL and licence details. Their privacy policy is at freemius.com/privacy.

If you email support, we keep the correspondence so we can help you over time.

Now and then we email a shop whose product pages show a problem one of our plugins solves. We use the business address the shop publishes on its own site, and we keep only the shop's name, that address, where we found it, and what we sent and when, so we never write twice by mistake. If you ask us to stop, we stop, and we keep the address on a do-not-contact list so it stays that way.

This website is hosted on Cloudflare Pages. We use Cloudflare Web Analytics, which is privacy-first and cookieless: it counts page views and referrers so we can see what is useful, without cookies and without collecting any personal data. Cloudflare's standard server logs also apply (see Cloudflare's privacy documentation).

Analytics and advertising cookies

If you accept analytics cookies, Google Analytics sets cookies on this site that show us how visitors use it: which pages they read, for how long, and how they found us. They are kept for up to 13 months.

We advertise BossMage on Google. If you accept advertising cookies, Google Ads sets cookies on this site that tell us which ad, if any, brought you here, so we can see which ads lead to trials and purchases. They are kept for up to 90 days.

If you accepted advertising cookies and then start a trial or buy, we keep Google's reference for that ad click on our server, alongside the order, for up to 90 days. A trial that becomes a paid licence is charged later without you returning here, and this reference is the only way we can tell which ad led to it. It is Google's click reference and nothing else: no name, no email address, no payment details.

We also advertise BossMage in ChatGPT. If you accept advertising cookies, OpenAI's measurement pixel sets three cookies on this site: one that records which ChatGPT ad, if any, brought you here, kept for up to 30 days; a random reference for your browser, kept for up to a year; and one that records your choice for the pixel, kept for 30 days. If you then start a trial or buy, we tell OpenAI that it happened, with the plan, the amount, the currency and our reference number for the order, so we can see which ads lead to trials and purchases. Nothing else about you travels with it: no name, no email address, no payment details.

If you reject them, none are set, and anything Google still receives about a visit or a purchase comes without cookies and without the ad click reference. OpenAI's pixel is not loaded at all.

When you finish a checkout, Freemius sends you back to this site. We check that the return really came from Freemius and keep only its reference number, amount and currency, so the same sale is never counted twice. The return also carries your email address; this site does not store it or send it to Google.

If a trial later becomes a paid licence, Freemius tell our server that the payment went through, and we add their reference for it, the amount and the currency to that same record. Nothing about you travels with it.

You can change your choice at any time with Cookie settings at the foot of every page. Google's use of this data is covered by its own privacy policy at policies.google.com/privacy, and OpenAI's by its own at openai.com/policies.

Why we are allowed to use this data

• Contract: providing your licence, updates and support.
• Legitimate interest: keeping support history so we do not ask you the same questions twice, and telling a shop about a plugin that solves a problem on its pages.
• Consent: analytics and advertising cookies, only if you accept them.

How long we keep it

Licence and purchase records are kept for the life of the licence plus the period UK accounting law requires. Support emails are kept while they remain useful for supporting you.

Your rights

You can ask us to access, correct, export or delete your personal data, or to limit how we use it. You have the right to object to any use we make of it on the basis of legitimate interest, including any email about our plugins; if you object to those emails, they stop at once. You can also complain to the UK Information Commissioner's Office. Email [email protected] and we will respond within 30 days.

Changes

If this policy changes in a way that matters, we will say so plainly on this page with a new date at the top.