Privacy Policy

This privacy notice sets forth how WP White Security, the developers of the WP 2FA plugin, uses your information and respects your privacy.

This notice was last updated on 11th November 2021.

This notice regards our relationship with you as a website visitor and/or as a customer.If you use our plugins, they might capture and store user data on the databases of your own websites. This notice does not pertain to the user data held on your own websites through your uses of our plugins. Depending on internal policies, or local or national regulations, you may need to disclose the data captured by our plugins on your own sites through your own site privacy notices.


This privacy notice applies to the website, which is a business site operated by WP White Security. We are a company located in the Netherlands. (Blaak 520, 3011TA Rotterdam)



If you contact us with a customer service concern, we’ll do our best to help. This may involve us asking you for technical information about your website. Any information you give to us in the context of a support query will only be used by our internal team for as long as it takes to resolve your concern. We will log your support experience in our internal customer service system in case we need to follow up.

We don’t use any third parties for customer service, and we won’t pass your details to any.

If you fill in a contact form, the form will collect your name, email address and the other information you provide in the form. We only use this data to reply to you. We retain this data  for as long as it is necessary to respond to your message.


While we’d love to keep you in the loop about our latest plugins and news, you will not receive any promotional messages from us unless you opt in to allow us to send them.

If you have opted in but are no longer interested in our promotional messages from us, you can unsubscribe by using the unsubscribe links in all our emails.


When visitors leave comments on articles or posts, the site collects the data shown in the comment form, and also the visitor’s IP address and browser user agent string to help spam detection. An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here. After approval of your comment, your profile picture is visible to the public in the context of your comment.



We use Google Analytics to learn how our users are using the website and how the website is performing. All the data on Google Analytics is anonymous. Following is a list of cookies that Google Analytics sets when you access our website:

_ga (term 2 years)

_gid (term 24 hours)

These cookies are used by Google Analytics service to store a unique user ID so the platform can determine if two or more distinct hits belong to the same user or not. For more information refer to:

_gat (term 1 minute)

This cookie does not store any user information. It is just used by Google to limit the number of requests that have to be made to Google’s advertising networks. For more information refer to:

To opt out of Google and other third party cookies, visit


We sell our products using Freemius secure checkout which automatically adds cookies when a user opens the checkout. Those are essential cookies for security, fraud detection & prevention, and completion of a purchase. There’s no way to check out without letting the service use cookies. Read the Freemius checkout cookies policy.


You will be notified that this website uses cookies the first time you visit via a notification bar in the footer. Once you close the notification bar we use the below cookie to keep a record that you’ve read the notice so we do not show you the notification bar every time you visit this website.

_catAccCookies (term 365 days)


We may occasionally embed useful content such as videos from YouTube, tweets, etc. Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These services may collect your IP Address, your browser’s User Agent, store and retrieve cookies on your browser, embed additional third party tracking, and monitor your interaction with that embedded content, including correlating your interaction with the content with your account with that service, if you are logged in to that service. I recommend exercising your privacy rights directly through the services using the links above.


Our website is:

Hosted on Kinsta. You can read their European data processing agreement here.

Backed up with BlogVault online WordPress backup service, which is located in the EU..

Our plugins are sold through Freemius, a third party payment gateway service. If you purchase one of our plugins there, your commercial relationship for the transaction will be with Freemius. We will have no access to any of your financial or transactional data. Their privacy policy can be viewed here.

Your customer service relationship will be with us (read the Terms & Conditions for more information).

Our newsletter is hosted by Mailchimp. You can learn how they protect your data here.

If you contact our support team, your email address and shared contact details are handed and stored on Help Scout. For more information refer to their privacy policy and General Security and Privacy Information page. Help Scout data is stored in the United States. Help Scout is a GDPR compliant service. Read their Security Policy for more information on where and how the data is stored.


We retain all customer transnational data indefinitely.

We retain website comments indefinitely unless you request otherwise.

We retain non-personal Google Analytics data for the past 26 months of website traffic.


We ensure that all the software we use is the latest and most secure version available on the market. We also ensure that all the online services we work with and where your data is stored (such as Freemius and MailChimp) are compliant with European data protection standards as well as the regulations of their respective countries.


To discuss any privacy concerns you have as a customer of our plugins or a user of this website, or to invoke your privacy rights under European law, please contact us on

Please note that as we have no access to any of the audit log and security data generated by users of some of the plugins we develop. We cannot assist you in invoking your privacy rights pertaining to installations of the plugin. You will need to contact the administrator of the site using the plugin to invoke your rights.


This website contains links to other websites. Some of these links are affiliate links. We do not share your data with any websites we link to.


If you have any questions or concerns about the ways we use your data, or this privacy notice, please contact us at