Privacy Policy

Last updated: October 24, 2026

This policy explains what personal data ZeroConfig collects, why, and what you can do about it. ZeroConfig is operated by OmniPure Marketing LLC, a New Mexico limited liability company, 1209 Mountain Rd Pl NE Ste N, Albuquerque, NM 87110, United States ("we"). Contact: hello@zeroconfigwp.com.

1. Who this covers

Site owners and administrators who install the ZeroConfig WordPress plugin and turn it on.
Customers who buy a paid plan.
People who join our e-mail list on zeroconfigwp.com.
Visitors of our customers' websites, whose browsers load optimised images and files from our servers.

2. What we collect and why

Data	When	Why	Legal basis
Site address and name, WordPress and PHP versions, names of the active theme and plugins, web server type, the plugin's settings state	Once when an administrator presses Turn on, then hourly while the engine is on. Nothing is sent before Turn on.	To run the service: choose safe settings for your theme and plugins, show plan and usage, deliver optimised files.	Contract (providing the service you switched on)
Administrator e-mail address	Only if the administrator ticks the optional box under Turn on. Unticking it removes it at the next hourly sync.	To tell you when a monthly limit is reached or your PageSpeed score drops.	Consent
Public images, CSS and JavaScript files of your site, and a few public pages	When a visitor first requests an optimised file, and during the Safety Check and critical CSS generation	To create optimised copies and to check that ZeroConfig does not break your pages.	Contract
Safety Check results for your public pages: error messages shown in the browser console, addresses of files that failed to load, and before/after screenshots of a page where a feature had to be switched off	During each Safety Check, only for pages and features that failed	To find and fix incompatibilities with your theme and plugins without needing access to your site.	Contract
Your message and the page address you give in "Something looks off?", together with the theme/plugin names and which ZeroConfig features are on	Only when an administrator sends that form	To investigate the problem you reported.	Contract
Name, e-mail, billing country, order and subscription data	When you buy a paid plan	To issue and manage your licence. Payment card data is handled by our payment provider and never reaches us.	Contract; legal obligation for invoices
The page address you enter in the free critical CSS generator, the generated CSS, and a one-way hash of your IP address that changes every day	When you use the tool at zeroconfigwp.com/critical-css	To open that public page in a browser on our servers and return the result; the hash only counts the daily free limit. Address and result are deleted after 30 days, the hashes after 7. If Cloudflare Turnstile is enabled, it checks the request is made by a person (Cloudflare privacy policy applies).	Legitimate interest (providing the tool you asked for, preventing abuse)
E-mail address, the plan you are interested in, the time you agreed	When you use "Keep me posted" on zeroconfigwp.com	To tell you when ZeroConfig is on WordPress.org and when paid plans open.	Consent
IP address and browser user agent of people loading files from our servers (including visitors of customer sites); a one-way hash of the IP for form abuse protection	On every request to our servers	To deliver files, prevent abuse and keep the service secure.	Legitimate interest

We never collect visitor accounts, orders, form entries or passwords from your website. zeroconfigwp.com does not use cookies or analytics.

3. Our role for your visitors' data

When your visitors' browsers load optimised files from our servers, we process their IP address and user agent on your behalf, as your processor. A data processing agreement is available on request at hello@zeroconfigwp.com.

4. Who we share data with

Provider	Purpose	Location
Dehost İnternet ve Bilişim Teknolojileri Ltd. Şti.	Servers that run the service and store optimised copies	Istanbul, Turkey
BunnyWay d.o.o. (Bunny.net)	Content delivery of optimised files, once enabled	Slovenia, EU, with delivery points worldwide
Our payment provider, named at checkout	Payments, invoices and tax as merchant of record; customer portal	United States or United Kingdom
Google (PageSpeed Insights API)	Measuring the public home page of paid plans weekly. Only the page address is sent.	United States

We are based in the United States and our servers are in Turkey; transfers of personal data from the EU to these countries, and to the providers above, rely on Standard Contractual Clauses or an adequacy decision. We do not sell personal data.

5. Retention

Site data: while the engine is on. Deleting the plugin asks us to forget the site; we then delete its e-mail, name and theme/plugin list immediately. Optimised copies of a site's files are deleted within 90 days after the site is forgotten or has been inactive for 90 days.
Safety Check screenshots: 30 days, kept on our own servers (never on the public CDN), then deleted automatically. Check results and reports sent from "Something looks off?": 30 days for check results; reports until the site is forgotten.
Customer and invoice data: as long as the licence is active, then for as long as tax and accounting law requires.
E-mail list: until you unsubscribe or ask us to delete it.
Server logs with IP addresses: up to 14 days.

6. Your rights

You can ask us for a copy of your data, to correct it, delete it, restrict or object to its use, or to receive it in a portable format, and you can withdraw consent at any time. Write to hello@zeroconfigwp.com; we reply within 30 days. You can also complain to your data protection authority.

7. Security

Connections use HTTPS. Site tokens are stored only as hashes. Our servers refuse to fetch from private networks, and access to customer data is limited to the people who run the service.

8. Changes

We will post changes here and update the date above. If a change is significant we will tell customers by e-mail before it applies.