Introduction
Ultimate Security (“we,” “us,” “our”) is committed to protecting the privacy of our users. This Privacy Policy explains how we handle user data for Ultimate Security, a lightweight, modular, and privacy-focused WordPress security plugin, and our website at wpultimatesecurity.com.
Ultimate Security is installed directly on your WordPress site and runs entirely on your server. You maintain full control and ownership of all security data. We do not collect, store, or have access to any data from your WordPress installations (logs, login attempts, blocked IPs, 2FA records, etc.). We only collect the minimal data necessary from our marketing site for licensing, payments, and support.
By using our website or plugin, you agree to this Privacy Policy.
Compliance with COPPA
We do not knowingly collect personal information from children under 13. If you believe your child has provided such information, contact us immediately so we can remove it.
Information We Collect
Premium License Purchases
When you buy a premium license on wpultimatesecurity.com:
- License and Activation Data: Name, email address, license key.
- Payment Details: Processed securely by third-party providers (Stripe, PayPal). We do not store full card details.
- Order Information: Name, billing/shipping address, email, payment reference.
Support and Communication
Name, email, and details you provide when contacting support or submitting tickets.
Website Usage (Device Information)
When you visit wpultimatesecurity.com we may collect:
- Browser type, IP address, time zone
- Cookies, log files
- Pages viewed, referral sources
- Interaction data via Google Analytics and Microsoft Clarity
These help us understand usage and improve the site.
What We Do NOT Collect
- Any data from the Ultimate Security plugin running on your sites (security logs, activity monitoring, hardening status, etc.). Everything stays on your server.
- Visitor data or personal information from websites you protect with our plugin.
- Telemetry, tracking, or analytics from the plugin. It is built privacy-first and does not “phone home.”
Use of Collected Information
- Process payments and issue/validate licenses
- Provide customer support
- Send important updates, security advisories, and product news (you can unsubscribe from marketing emails anytime)
- Improve our marketing site and understand user needs
We do not sell your data.
Compliance with GDPR
We comply with GDPR principles. Your data is processed to fulfill contracts (licenses) or legitimate business interests. Data may be transferred to and processed in the US or Canada. EU residents have rights to access, correct, delete their data.
Data Retention
We keep license and contact data as long as needed for support, licensing, and legal obligations. You can request deletion of your data (subject to legal requirements) by contacting us.
Cookies and Tracking
Our marketing site uses essential and analytics cookies. You can manage them via browser settings. The Ultimate Security plugin does not deploy tracking cookies on your sites.
Third-Party Data Sharing
We share data only with:
- Payment processors (Stripe, PayPal)
- Service providers helping with support or hosting (under strict agreements)
- When legally required
We do not sell personal information.
Security Measures
We use industry-standard security to protect the limited data we hold. However, as a self-hosted plugin, you are fully responsible for the security of your WordPress installation.
Your Rights
You can request access, correction, or deletion of your personal data by contacting us. EU residents have additional GDPR rights, including the right to object to processing.
Changes to this Privacy Policy
We may update this policy. Changes will be posted here with a new effective date. Continued use means acceptance.
Contact Information
Questions?
Reach out to:
Email: [email protected]
Website: https://wpultimatesecurity.com
Plugin Page: https://wordpress.org/plugins/ultimate-security/
Effective Date: February 2026