Legal

Privacy Policy

Last updated: August 18, 2026

1. Introduction

CoCart Headless, LLC (“Company,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use the Frosty Cache WordPress plugin (“the Plugin”), visit our website at frostycache.com (“the Website”), or interact with our services.

By using our Plugin or Website, you consent to the practices described in this Privacy Policy.

2. Scope of This Privacy Policy

This Privacy Policy applies to visitors of our Website and to customers who purchase or activate a Frosty Cache license. It does not apply to the shoppers, customers, or end users of the WordPress sites on which the Plugin is installed. Store operators who run the Plugin are independently responsible, as data controllers, for the personal data of their own site’s visitors and customers, and for complying with applicable data protection laws with respect to that data. The Plugin itself does not collect, store, or have access to your store’s customer, order, or content data; see Section 4 for details.

3. Information We Collect

We collect only the minimum information necessary to provide and support our services:

3.1 Account Information

  • Email address: Collected when you purchase a license, used for account management, license delivery, support communication, and important product updates.
  • Name: As provided during the purchase process through Polar.sh.

3.2 License Activation Data

When you activate your Frosty Cache license key, the following information is transmitted to our license server:

  • License key: Your unique license identifier.
  • Site URL: The domain name of the WordPress installation where the Plugin is activated, used to validate that the license is being used within the permitted number of sites.
  • Plugin version: The installed version of Frosty Cache, used to deliver appropriate updates.

3.3 Support Interactions

If you contact us for support, we may collect information you voluntarily provide, such as your site URL, server configuration details, error logs, or screenshots to help diagnose and resolve your issue.

3.4 GitHub Repository Access

An active license includes access to our private GitHub repository, used to manually download releases and to file bug reports or feature requests. To grant this access, we collect your GitHub username (or the email address associated with your GitHub account) and share it with GitHub as the repository host. Any information you include in issues or comments you post to the repository is visible to us and to other collaborators with repository access.

4. Information We Do Not Collect

We want to be transparent about what we do not do:

  • No telemetry or analytics: The Plugin does not phone home, send usage statistics, or collect analytics data from your WordPress site. The only exception is the standard WordPress update check: when WordPress checks for plugin updates, it contacts our update server with your site URL and the installed Plugin version to determine whether a newer version is available. This is the same mechanism WordPress uses for any plugin and is not usage telemetry.
  • No user tracking: The Plugin does not track, monitor, or collect information about visitors to your WordPress site.
  • No content access: The Plugin does not read, transmit, or store any of your WordPress content, user data, or database information.
  • No behavioral data: We do not track how you use the Plugin’s settings or features.
  • No third-party data sharing from the Plugin: The Plugin does not send any data to third-party analytics, advertising, or tracking services.

The Plugin operates entirely on your server. Cached data is stored locally on your WordPress installation and is never transmitted to us or any third party.

We do not send marketing or newsletter emails of any kind. The only emails you will receive from us are transactional: license delivery, support replies, and important product or security updates.

5. Payment Processing

All payments are processed by Polar.sh, a third-party payment platform. When you make a purchase:

  • Your payment information (credit card number, billing address, etc.) is collected and processed directly by Polar.sh.
  • We do not receive, process, or store your full credit card details.
  • We may receive limited transaction information from Polar.sh, such as a transaction ID, the last four digits of your card, and the amount paid.

We encourage you to review Polar.sh’s Privacy Policy for details on how they handle your payment information.

6. Cookies

6.1 Marketing Website (frostycache.com)

Our Website may use cookies for:

  • Essential cookies: Required for basic website functionality.
  • Analytics cookies: We use DataFast to understand how visitors interact with our Website. DataFast collects standard analytics data, such as pages visited, referral source, device and browser type, and approximate location, using cookies and your IP address. We also use DataFast to record specific on-site actions as custom goals — for example, joining the waitlist, selecting a pricing plan, or clicking through to checkout — so we can understand which pages and actions lead to conversions. These cookies do not track you across other websites. See DataFast’s Privacy Policy for details on how they handle this data.

You can control cookie preferences through your browser settings. Disabling cookies may affect certain Website features but will not impact your use of the Plugin.

6.2 The Plugin

The Frosty Cache plugin does not set, read, or use any cookies. It operates entirely server-side and has no impact on cookies set by your WordPress site or other plugins.

7. Data Retention

  • Account information: Retained for as long as you have an active license or account with us. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law.
  • License activation data: Site URL records associated with your license are retained for the duration of your active license. When a license is deactivated from a site, the associated site URL record is removed.
  • Support communications: Retained for up to 2 years after the last interaction to provide continuity of support and to improve our services.
  • Transaction records: Retained as required by applicable tax and accounting laws.

8. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar requirements, we rely on the following legal bases to process your personal data:

  • Contract performance: Processing your account, license, and payment information is necessary to deliver the license you purchased and to provide support.
  • Legitimate interests: We process limited license activation and support data to operate, secure, and improve the Plugin and our services.
  • Consent: Where required, such as for non-essential cookies on our Website, we rely on your consent, which you may withdraw at any time.
  • Legal obligation: We retain certain transaction records to comply with applicable tax and accounting laws.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data, subject to legal retention requirements.
  • Portability: Request your data in a structured, commonly used format.
  • Objection: Object to processing of your data for specific purposes.
  • Withdrawal of consent: Withdraw consent at any time where processing is based on consent.
  • Lodge a complaint: Lodge a complaint with your local data protection authority if you believe our processing of your personal data violates applicable law.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

10. Third-Party Services

We use the following third-party services:

  • Polar.sh: Payment processing and subscription management. Polar.sh collects and processes payment information on our behalf. See Polar.sh’s Privacy Policy.
  • DataFast: Website analytics and conversion tracking for frostycache.com. See DataFast’s Privacy Policy.
  • GitHub: Hosts our private repository, used to deliver releases and to track bug reports and feature requests from licensed customers. See GitHub’s Privacy Statement.

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

11. Data Security

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

12. Children’s Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal data from a child under 16, we will take steps to delete that information promptly. If you believe we have collected information from a child, please contact us at [email protected].

13. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We will ensure that appropriate safeguards are in place to protect your personal data in accordance with applicable data protection laws.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last updated” date at the top of this page. For significant changes, we will make reasonable efforts to notify you via email or through the Plugin’s admin interface.

Your continued use of the Plugin or Website after any changes indicates your acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: