Who we are
This Privacy Policy explains how Nahnu Fitness LLC (“Nahnu”, “we”, “us” or “our”), a company based in Spokane, Washington, that publishes Nahnu Plugins, handles information in connection with Nahnu Login Shield (the “Plugin”) and this website at nahnuloginsheild.com (the “Website”).
It should be read together with our Terms of Use and Cookie Policy. If you have a question, you can reach us through the support page.
Information we handle
Information you send us. When you use the support, security-report or integration-request forms, or otherwise contact us, we receive what you choose to include. That usually means your name, your email address, and your message, and may include details such as the plugin version, WordPress or PHP versions, other plugins you use, or the name and link of a plugin you’d like us to support. Your messages are stored on our own self-hosted website and support system and are sent to us by email. Please don’t send passwords, API keys, or other sensitive information.
Technical information. Like most websites, the Website and the services that deliver and protect it (our hosting provider and Bunny.net, the content-delivery and security service in front of the Website) process technical information such as your IP address, browser type, device type, the pages you request, and the date and time. This is used to deliver the Website, keep it secure and prevent abuse.
Visit statistics. We measure how the Website is used with two analytics tools, Plausible Analytics and Matomo, both hosted on our own servers and both set up without cookies. See “Website analytics” below.
What we don’t collect. We don’t collect information about your website, your visitors or your users through the Plugin. We don’t ask for payment details, because the Plugin and the Website are free. The Website has no user accounts and no comments, so we don’t collect account details or comments.
How we use information
We use the information we handle to:
- read and reply to your messages, and to look into the problem, security report or request you sent;
- keep the Website and our services secure, and prevent spam, fraud and abuse;
- improve the Plugin, the documentation and the Website, for example by learning which pages are read and which questions come up often;
- keep the records we need, and follow the law; and
- protect our rights, and the rights and safety of others.
We use your email address only to reply to you. We don’t send newsletters or marketing email, we don’t add you to a mailing list, and we don’t sell or rent your information.
Website analytics
To understand how the Website is used, we use two analytics tools: Plausible Analytics and Matomo. We host both ourselves on our own servers, so the data isn’t sent to the tools’ makers or to any outside analytics company. Both are set up without cookies, so neither stores anything on your device to recognize you from one visit to the next.
They record general, aggregated information about visits, such as which pages were viewed, where the visit came from, the type of browser and device, and the approximate country. We use them to see which pages are useful and to improve them. We don’t use them to build profiles of individuals, to identify you, or to follow you across other websites, and the data isn’t shared with advertisers or other third parties.
Why we’re allowed to use it
If you are in a place where the law requires a legal basis for handling personal information (for example, the European Economic Area or the United Kingdom), we rely on:
- Your request. You send us information so that we can respond to you, and we use it for that purpose.
- Our legitimate interests in running, securing and improving the Website and the Plugin, understanding how the Website is used, and answering the people who contact us, balanced against your rights.
- Legal obligations, where we have to keep or share information by law.
- Your consent, in the limited cases where we ask for it. You can withdraw it at any time.
Who we share it with
We don’t sell your personal information, and we don’t share it with others for advertising. We share it only in these situations:
- Service providers. Companies that help us run the Website and respond to you, such as our hosting provider, our email systems, and Bunny.net, which delivers and protects the Website. They may handle information only to provide their service to us, under their own terms and privacy policies.
- Spam protection. When you send a message through one of our forms, its content, including details such as your message, your email address and your IP address, is sent to OOPSpam, a third-party spam-detection service, so it can tell whether the submission is spam. OOPSpam handles that information under its own terms and privacy policy.
- Legal and safety reasons. When we believe in good faith that we must, to follow the law or a legal process, to enforce our terms, to protect the safety, rights or property of others or ourselves, or to investigate fraud or security problems.
- Business changes. If our business or the Plugin is sold, merged or transferred, information may be passed to the new owner, who must handle it in line with this policy.
- With your permission, or when you ask us to.
The Plugin and your own website
The Plugin runs on your own WordPress site. It is designed to keep its settings and logs in your own database, and we don’t receive them. That means you, as the site owner, decide what is collected from your visitors and users, and you are responsible for your own privacy notices and for following the laws that apply to your site.
Some Plugin features can connect to third-party services that you choose to turn on, and information such as visitor IP addresses or form details may be sent to them. Those services are not run by us, and what they do with that information is covered by their own policies. Please review them before enabling a feature, and see our Terms of Use.
If you send us logs, screenshots or other files when asking for help, they may contain personal information about you or your users. Please remove anything you don’t want us to see before you send them.
Other websites and services
The Website links to other websites and services, such as WordPress.org, which distributes the Plugin and collects its own information, for example about downloads and update checks. We don’t control other websites and aren’t responsible for their privacy practices, so please read their policies.
Cookies and similar technologies
Our analytics tools don’t use cookies. The Website does use a cookie notice that remembers your choice. Our Cookie Policy explains what the Website stores in your browser and how you can control it. We don’t track you across other websites, so browser “Do Not Track” or similar signals don’t change what we do.
How long we keep information
We keep messages and the information in them for as long as we need to answer you, follow up, keep reasonable records, and meet legal requirements. After that, we delete or anonymize them. You can ask us to delete your information sooner, as described below. Technical logs kept by our hosting and security providers, and by OOPSpam, are kept according to their own schedules.
How we protect information
We use reasonable technical and organizational measures to protect the information we handle. No website, transmission or storage method is completely secure, so we can’t guarantee absolute security. Please don’t send information through the Website that you wouldn’t be comfortable sending over the internet.
Where information is processed
The Plugin and the Website are available worldwide. We are based in the United States, and the Website and the services we use may process information in the United States and other countries, which may have different data-protection laws from where you live. If you contact us from outside the United States, you understand that your information will be handled in the United States. Where the law requires safeguards for transfers, we use them.
Your choices and rights
Depending on where you live, you may have the right to:
- ask what personal information we hold about you, and get a copy;
- ask us to correct information that is wrong;
- ask us to delete your information;
- object to, or ask us to limit, certain ways we use your information;
- receive your information in a portable format;
- withdraw consent you gave us; and
- not be treated unfairly for using these rights.
To use any of these rights, contact us through the support page and tell us what you’d like. We may need to confirm that the request comes from you. We’ll respond within the time the law requires. If we turn a request down, we’ll tell you why, and you may be able to appeal by replying to us.
We don’t sell personal information and we don’t share it for cross-context behavioral advertising, so there is nothing to opt out of. If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your local data-protection authority.
Children
The Plugin and the Website are meant for adults. You must be at least 18 years old to use them, and we don’t knowingly collect personal information from anyone under 18. If you believe a child has sent us information, please tell us through the support page and we’ll delete it.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we’ll post the new version on this page and change the “Last updated” date at the top. If we make a significant change to how we handle information, we’ll make the change clear on the Website.
Contact us
Questions about this policy, or want to use one of your rights? Reach us through the support page.
Nahnu Fitness LLC
Spokane, Washington, USA