Privacy
Short version: we collect what we need to build and host your website, sell you templates and keep your license safe. No ad trackers, no selling data.
Last updated: 24 October 2026
Who we are
The controller of your personal data is Tomáš Šrámek, Kaprova 42/14, Staré Město, 110 00 Praha 1, Czech Republic, company ID (IČO) 05627974, who operates WPTom and wptom.com (“we”). Contact: tom@wptom.com.
What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Email, name, GitHub profile name (if you sign in with GitHub) | Your account and sign-in | Contract |
| Orders, license keys, invoices | Selling and delivering templates, accounting | Contract, legal obligation |
| Device names, IP addresses, country, download times | Device limit, update downloads, detecting shared license keys | Legitimate interest (license protection) |
| Reviews you submit | Showing them on the site after approval | Consent |
| Name, email, phone, business details and messages you send through the website form | Replying to you and building your website | Steps before a contract, contract |
| Content for your website (texts, photos, logo, domain) | Building, hosting and changing your website | Contract |
Payment details go straight to Stripe, our payment processor; we never see or store them.
Who processes data for us
- Cloudflare (hosting of this site, the app and the websites we build; the database and files, stored in the USA; the bot check on the sign-in form)
- Stripe (payments and invoices)
- Resend (sign-in, account and website request emails)
- GitHub (only if you choose “Continue with GitHub”)
Some of these providers store data in the USA. Transfers rely on the EU-US Data Privacy Framework where the provider is certified, and on the European Commission's standard contractual clauses otherwise.
Cookies
We only use cookies the site needs to work. No analytics or advertising cookies.
We count page views and a few steps on the way to a purchase (such as a click on Buy) with our own analytics and with Cloudflare Web Analytics. Neither uses cookies or identifies you: we store no IP addresses, and visitors are counted with a hash that changes every day.
| Cookie | Purpose | Lifetime |
|---|---|---|
better-auth.* | Keeps you signed in on app.wptom.com | 30 days, renewed while you use it |
wt_user | Shows “Hi, …” in the header before the page loads. Holds your first name, and for our own staff a flag that shows the admin link. | 30 days |
wt_preview | Before launch only: lets invited people see the site | 90 days |
wt_theme | Remembers dark or light theme | 1 year |
How long we keep data
- Your account: until you delete it.
- Orders and invoices: as long as accounting law requires, up to 10 years.
- Download and device records (IP address, country, time): 12 months.
- Reviews: until you ask us to remove them.
- Website requests that don't lead to a website: 12 months.
- Your website's content: while we host it, and up to 60 days after it ends, so you can ask for it back.
Your rights
You can ask for a copy of your data, correct it, delete your account, or object to processing. Email tom@wptom.com. You can also complain to your data protection authority; in the Czech Republic that is the Office for Personal Data Protection (uoou.gov.cz).