Your privacy is very important to us. At Caseproof we have a few fundamental principles that we follow:
- We don’t ask you for personal information unless we truly need it. (We can’t stand services that ask you for things like your gender or income level for no apparent reason.)
- We don’t share your personal information with anyone except to comply with the law, develop our products, or protect our rights.
- We don’t store personal information on our servers unless required for the on-going operation of our site.
Caseproof LLC (“Caseproof” dba MemberPress) operates several websites including memberpress.com. It is Caseproof’s policy to respect your privacy regarding any information we may collect while operating our websites.
Website Visitors
Like most website operators, Caseproof collects non-personally-identifying information of the sort that web browsers and servers typically make available, such as the browser type, language preference, referring site, and the date and time of each visitor request. Caseproof’s purpose in collecting non-personally identifying information is to better understand how MemberPress’ visitors use its website. From time to time, Caseproof may release non-personally-identifying information in the aggregate, e.g., by publishing a report on trends in the usage of its website.
Caseproof also collects potentially personally-identifying information like Internet Protocol (IP) addresses for logged in users and for users leaving comments on our blogs. Caseproof only discloses logged in user and commenter IP addresses under the same circumstances that it uses and discloses personally-identifying information as described below, except that blog commenter IP addresses are visible and disclosed to the administrators of the blog where the comment was left.
Gathering of Personally-Identifying Information
Certain visitors to Caseproof websites choose to interact with Caseproof in ways that require Caseproof to gather personally-identifying information. The amount and type of information that Caseproof gathers depends on the nature of the interaction. For example, we ask visitors who comment on our blog to provide a username and email address. Those who wish to receive MemberPress updates via email, we collect their emails. In each case, Caseproof collects such information only insofar as is necessary or appropriate to fulfill the purpose of the visitor’s interaction with Caseproof. Caseproof does not disclose personally-identifying information other than as described below. And visitors can always refuse to supply personally-identifying information, with the caveat that it may prevent them from engaging in certain website-related activities.
Aggregated Statistics
Caseproof may collect statistics about the behavior of visitors to its websites. For instance, Caseproof may monitor the most popular pages on the memberpress.com site or use spam screened by the Akismet service to help identify spam. Caseproof may display this information publicly or provide it to others. However, Caseproof does not disclose personally-identifying information other than as described below.
Protection of Certain Personally-Identifying Information
Caseproof discloses potentially personally-identifying and personally-identifying information only to those of its employees, contractors and affiliated organizations that (i) need to know that information in order to process it on Caseproof’s behalf or to provide services available at Caseproof’s websites, and (ii) that have agreed not to disclose it to others. Some of those employees, contractors and affiliated organizations may be located outside of your home country; by using Caseproof’s websites, you consent to the transfer of such information to them. Caseproof will not rent or sell potentially personally-identifying and personally-identifying information to anyone. Other than to its employees, contractors and affiliated organizations, as described above, Caseproof discloses potentially personally-identifying and personally-identifying information only in response to a subpoena, court order or other governmental request, or when Caseproof believes in good faith that disclosure is reasonably necessary to protect the property or rights of Caseproof, third parties or the public at large. If you are a registered user of a Caseproof website and have supplied your email address, Caseproof may occasionally send you an email to tell you about new features, solicit your feedback, or just keep you up to date with what’s going on with Caseproof and our products. We primarily use our various product blogs to communicate this type of information, so we expect to keep this type of email to a minimum. If you send us a request (for example via a support email or via one of our feedback mechanisms), we reserve the right to publish it in order to help us clarify or respond to your request or to help us support other users. Caseproof takes all measures reasonably necessary to protect against the unauthorized access, use, alteration or destruction of potentially personally-identifying and personally-identifying information.
Cookies
A cookie is a string of information that a website stores on a visitor’s computer, and that the visitor’s browser provides to the website each time the visitor returns. Caseproof uses cookies to help Caseproof identify and track visitors, their usage of Caseproof websites, and their website access preferences. Visitors of Caseproof websites who do not wish to have cookies placed on their computers should set their browsers to refuse cookies before using Caseproof’s websites, with the drawback that certain features of Caseproof’s websites may not function properly without the aid of cookies.
Usage Tracking
Caseproof collects certain information through usage tracking. The purpose of usage tracking helps Caseproof to better understand our users and their website needs by looking at a range of variables in their Caseproof plugin, WordPress, and web host. This information allows us to continuously improve our product as well as our Q&A / testing process. The information may include the license key (and type), plugin activation dates, membership and transaction statistics to help us make sure our features and updates get tested in situations that closely match our customers’ site environments and MemberPress usage. We may also collect information on active integrations and plugin settings but sensitive settings such as API keys are automatically excluded from tracking.
Our usage tracking includes collecting information as to the WordPress active theme/plugins, locale, timezone, whether SSL enabled, or if a site is a multisite, and the site URL. In addition, the usage tracking includes determining the PHP and MySQL Versions in order to help us make sure our testing procedures have proper coverage to avoid compatibility issues, and determining the server software, which is used for testing purposes.
Opting Out of Usage Tracking
When you install MemberPress, then you will by default be opted into usage tracking. To disable this, just go to MemberPress > Settings > General; on this screen, you’ll need to check the Disable Anonymous Usage Reporting checkbox.
Caseproof Services Used by the Free Version of MemberPress
The free version of MemberPress contacts the following Caseproof services. As with any web request, these services also receive the requesting IP address and standard HTTP headers. Requests made by the site’s server also include the WordPress user agent, which contains the WordPress version and the site URL.
licenses.caseproof.com is used to check whether a site is a test or staging site. The check may run when an administrator views the WordPress Plugins screen, or when the Stripe site report described below is due. Caseproof receives the site’s host name.
auth.caseproof.com is used only when an administrator connects or disconnects a MemberPress account. When connecting, the administrator’s browser is sent to auth.caseproof.com with the site’s return URL, a WordPress security nonce and, if the site is reconnecting, its site identifier (plus a Stripe flag and the payment method ID when connecting through Stripe). The site then sends its site identifier and an authorization code to complete the connection. When disconnecting, the site sends its site identifier and the email address of the connected MemberPress account.
stripe.memberpress.com is used with Stripe Connect.
- When an administrator connects a Stripe payment method, the administrator’s browser sends a signed token to stripe.memberpress.com containing the site identifier, the MemberPress account’s user identifier, the payment method ID, the MemberPress edition and version, and the site’s return URL, error URL and two webhook URLs.
- When connection details are refreshed, credentials are looked up or a connection is removed, the site sends a signed token containing the site identifier, along with the payment method ID.
- When a Stripe payment or subscription is created, or a subscription is resumed, and Stripe is connected, the site may ask the service for the applicable transaction fee. This request is not skipped on staging, development or local sites. It sends the payment method ID, a signed token containing the site identifier, the site’s domain (its home address without the scheme or www), the MemberPress edition and version, the WordPress version, whether Stripe is in live or test mode, and a license key field. The free version has no license key setting, so this field is empty unless a key from a previously installed paid edition is still stored in the site’s MemberPress settings.
- Once a day, through WordPress cron, when the site is connected to a MemberPress account and a Stripe payment method is connected, a site report may be sent. It contains the same site domain and the MemberPress edition and version, with a signed token containing the site identifier. It is sent when it has not yet been reported, or when the site domain, edition or site identifier has changed since the last report the service answered. It is not sent when the site is detected as a staging, development, test or local site (from the WordPress environment type, the site address, or the licenses.caseproof.com check described above).
cspf-locate.herokuapp.com can be used when the Enable Tax Calculations and Enable VAT settings are both turned on, on membership registration pages (a membership’s own page, or a page with the registration form shortcode or the membership signup or checkout block), or on any front-end page if the Global CSS Styles setting is on. It is not used on the registration page of a tax-exempt membership. It is used for visitors who are not logged in, and for logged-in members only when the “Show The Fields Below For Logged-in Purchases” setting is on and address fields are shown and required. The visitor’s browser requests the visitor’s country and region from the service, so the service receives the visitor’s IP address.
Business Transfers
If Caseproof, or substantially all of its assets were acquired, or in the unlikely event that Caseproof goes out of business or enters bankruptcy, user information would be one of the assets that is transferred or acquired by a third party. You acknowledge that such transfers may occur, and that any acquirer of Caseproof may continue to use your personal information as set forth in this policy.
Ads
Ads appearing on any of our websites may be delivered to users by advertising partners, who may set cookies. These cookies allow the ad server to recognize your computer each time they send you an online advertisement to compile information about you or others who use your computer. This information allows ad networks to, among other things, deliver targeted advertisements that they believe will be of most interest to you. This Privacy Policy covers the use of cookies by Caseproof and does not cover the use of cookies by any advertisers.
Comments
Comments and other content submitted to Akismet anti-spam service are saved on our servers unless they were marked as false positives, in which case we store them long enough to use them to improve the service to avoid future false positives.
Privacy Policy Changes
Although most changes are likely to be minor, Caseproof may change its Privacy Policy from time to time, and in Caseproof’s sole discretion. Caseproof encourages visitors to frequently check this page for any changes to its Privacy Policy. Your continued use of this site after any change in this Privacy Policy will constitute your acceptance of such change.
