Privacy policy

What this website collects

This site is static. It sets no cookies and runs no tracking script. Page views are counted by Cloudflare Web Analytics, which is cookieless and records no personal identifier. There are no forms on this site.

Documentation search runs entirely in your browser. Nothing you type is sent anywhere.

What the Cartless plugin stores

On a site running Cartless, the plugin stores, for every paid order: the buyer's email address, their name if given, the items, amounts, tax and cost recorded at the time of sale, and the answers to any questions asked after payment. Card details never touch the site; they go from the buyer's browser to Stripe. The plugin keeps a Stripe customer reference so that Cartless Pro can charge a saved card for an upsell the buyer accepts — with the consent shown beside the pay button, and only on a funnel that has an upsell step.

For a checkout started and not finished, the free plugin stores a count, a value and the step reached — no email address. Abandoned checkouts are deleted after 60 days.

The merchant running the site is the data controller for their buyers. This policy describes what the software does; the merchant's own privacy policy governs their store.

Third parties

• Stripe takes payment. Checkout pages load js.stripe.com; the plugin sends the amount, currency, line descriptions and the buyer's email to api.stripe.com when an order is created or refunded. See Stripe's privacy policy.
• Freemius sells and licenses Cartless Pro as merchant of record, and handles refunds. The plugin contacts api.freemius.com only after a merchant opts in on the activation screen, or buys a licence. See Freemius's privacy policy.
• Cloudflare serves this website and counts its page views without cookies.
• The demo site at https://demo.getcartless.com runs the plugin in Stripe test mode. Anything entered there is wiped every night and no real payment is possible.

Your rights

A buyer can ask the merchant for a copy of their data or for its erasure. Cartless answers WordPress's own Tools → Export Personal Data and Tools → Erase Personal Data requests. Erasure anonymises: the name becomes "Anonymous", the address is blanked, and the order — its amounts and dates — survives, because tax law requires financial records to be kept and the right to erasure does not extend to them.

Contact

Questions about this policy: support@getcartless.com.