Privacy policy

WPLogin security records may contain event dates, account and operator identifiers and HMAC IP fingerprints, which are pseudonymous rather than anonymous. Tokens are hashed and expire. Administrators determine purposes, legal bases and retention; event retention starts at 30 days and cleanup depends on WP-Cron. Account deletion revokes tokens and removes or anonymises related records. Data stays in the installation database; configured mail, reCAPTCHA and update providers require separate assessment. Where GDPR or CCPA/CPRA applies, address access, correction, deletion and other applicable rights through the responsible site operator, with identity checks. WordPress export and erasure tools include plugin records. Contact official support for project enquiries.

Tutorials
Frequently asked questions
Plugin