Legal
Privacy Policy

Last updated: June 30, 2026

1. Introduction

CoCart Headless, LLC (“Company,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use the FrostyCache WordPress plugin (“the Plugin”), visit our website at frostycache.com (“the Website”), or interact with our services.

By using our Plugin or Website, you consent to the practices described in this Privacy Policy.

2. Scope of This Privacy Policy

This Privacy Policy applies to visitors of our Website and to customers who purchase or activate a FrostyCache license. It does not apply to the shoppers, customers, or end users of the WordPress sites on which the Plugin is installed. Store operators who run the Plugin are independently responsible, as data controllers, for the personal data of their own site’s visitors and customers, and for complying with applicable data protection laws with respect to that data. The Plugin itself does not collect, store, or have access to your store’s customer, order, or content data; see Section 4 for details.

3. Information We Collect

We collect only the minimum information necessary to provide and support our services:

3.1 Account Information

  • Email address: Collected when you purchase a license, used for account management, license delivery, support communication, and important product updates.
  • Name: As provided during the purchase process through Polar.sh.

3.2 License Activation Data

When you activate your FrostyCache license key, the following information is transmitted to our license server:

  • License key: Your unique license identifier.
  • Site URL: The domain name of the WordPress installation where the Plugin is activated, used to validate that the license is being used within the permitted number of sites.
  • Plugin version: The installed version of FrostyCache, used to deliver appropriate updates.

3.3 Support Interactions

If you contact us for support, we may collect information you voluntarily provide, such as your site URL, server configuration details, error logs, or screenshots to help diagnose and resolve your issue.

4. Information We Do Not Collect

We want to be transparent about what we do not do:

  • No telemetry or analytics: The Plugin does not phone home, send usage statistics, or collect analytics data from your WordPress site.
  • No user tracking: The Plugin does not track, monitor, or collect information about visitors to your WordPress site.
  • No content access: The Plugin does not read, transmit, or store any of your WordPress content, user data, or database information.
  • No behavioral data: We do not track how you use the Plugin’s settings or features.
  • No third-party data sharing from the Plugin: The Plugin does not send any data to third-party analytics, advertising, or tracking services.

The Plugin operates entirely on your server. Cached data is stored locally on your WordPress installation and is never transmitted to us or any third party.

We do not send marketing or newsletter emails of any kind. The only emails you will receive from us are transactional: license delivery, support replies, and important product or security updates.

5. Payment Processing

All payments are processed by Polar.sh, a third-party payment platform. When you make a purchase:

  • Your payment information (credit card number, billing address, etc.) is collected and processed directly by Polar.sh.
  • We do not receive, process, or store your full credit card details.
  • We may receive limited transaction information from Polar.sh, such as a transaction ID, the last four digits of your card, and the amount paid.

We encourage you to review Polar.sh’s Privacy Policy for details on how they handle your payment information.

6. Cookies

6.1 Marketing Website (frostycache.com)

Our Website may use cookies for:

  • Essential cookies: Required for basic website functionality.
  • Analytics cookies: To understand how visitors interact with our Website, helping us improve the user experience. These cookies do not track you across other websites.

You can control cookie preferences through your browser settings. Disabling cookies may affect certain Website features but will not impact your use of the Plugin.

6.2 The Plugin

The FrostyCache plugin does not set, read, or use any cookies. It operates entirely server-side and has no impact on cookies set by your WordPress site or other plugins.

7. Data Retention

  • Account information: Retained for as long as you have an active license or account with us. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law.
  • License activation data: Site URL records associated with your license are retained for the duration of your active license. When a license is deactivated from a site, the associated site URL record is removed.
  • Support communications: Retained for up to 2 years after the last interaction to provide continuity of support and to improve our services.
  • Transaction records: Retained as required by applicable tax and accounting laws.

8. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar requirements, we rely on the following legal bases to process your personal data:

  • Contract performance: Processing your account, license, and payment information is necessary to deliver the license you purchased and to provide support.
  • Legitimate interests: We process limited license activation and support data to operate, secure, and improve the Plugin and our services.
  • Consent: Where required, such as for non-essential cookies on our Website, we rely on your consent, which you may withdraw at any time.
  • Legal obligation: We retain certain transaction records to comply with applicable tax and accounting laws.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data, subject to legal retention requirements.
  • Portability: Request your data in a structured, commonly used format.
  • Objection: Object to processing of your data for specific purposes.
  • Withdrawal of consent: Withdraw consent at any time where processing is based on consent.
  • Lodge a complaint: Lodge a complaint with your local data protection authority if you believe our processing of your personal data violates applicable law.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

10. Third-Party Services

We use the following third-party services:

  • Polar.sh: Payment processing and subscription management. Polar.sh collects and processes payment information on our behalf. See Polar.sh’s Privacy Policy.

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

11. Data Security

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

12. Children’s Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal data from a child under 16, we will take steps to delete that information promptly. If you believe we have collected information from a child, please contact us at [email protected].

13. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We will ensure that appropriate safeguards are in place to protect your personal data in accordance with applicable data protection laws.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last updated” date at the top of this page. For significant changes, we will make reasonable efforts to notify you via email or through the Plugin’s admin interface.

Your continued use of the Plugin or Website after any changes indicates your acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: