Summary
This notice covers mpvw.gorkovenko.net: the plugin website and documentation, the live demo store at /demo/, and the license and update server at /license/. It also explains what the Magic Product Video for WooCommerce plugin does with data once it is installed on your store.
- No tracking. The site uses no analytics, no advertising and no social widgets. Fonts, images and videos are served from this server, so your browser contacts no other company while you read.
- Only what you send. We receive your name, email and message when you use the contact form, and your purchase code and site domain when you activate the plugin.
- Kept in the EU. The website, the license server and the mailbox run on servers rented from Hetzner Online GmbH in the European Union.
- Not sold. We do not sell, rent or trade personal data, and we do not use it for advertising.
- Your rights. You can ask what we hold about you, have it corrected or deleted, or object to its use. Write to contact@gorkovenko.net.
1. Who is responsible
The controller for the personal data described here, in the sense of the EU General Data Protection Regulation (GDPR), is the developer of the plugin:
Andrey Gorkovenko
Email: contact@gorkovenko.net
Website: mpvw.gorkovenko.net
We are not required to appoint a data protection officer. Questions about privacy go to the address above.
2. What we collect and why
Visiting the site
Like every web server, ours writes a log line for each request: your IP address, the date and time, the page or file requested, the response code, the amount of data sent, the referring page and the browser identification (user agent). We use these logs only to keep the site running, to find errors and to detect and block attacks. They are not combined with other data and not used to build profiles.
Contact form and email
When you write to us through the contact form or by email, we receive:
- your name and email address, so we can reply;
- the topic and your message, and anything you choose to include in it, such as a purchase code or a link to your store.
The form sends your message as an email to contact@gorkovenko.net. The form itself stores nothing. To stop automated spam, the server keeps a short-lived counter of how many messages were sent from your connection, identified only by a one-way hash of the IP address that changes every day; the counter is deleted after one hour. A hidden field and a time check filter out bots; no third-party CAPTCHA is used.
We use the message only to answer you and to follow up on your request. We do not add you to any mailing list.
License activation and updates
The plugin is sold on CodeCanyon. The purchase itself, your Envato account and your payment are handled by Envato under Envato's privacy policy; we do not receive your payment details.
When you activate the plugin on the License screen, and later when WordPress checks for updates or downloads one, your site sends our license server:
- the purchase code you entered;
- the domain of the site the plugin runs on;
- for update checks, the plugin version installed.
Our server asks the Envato API whether the purchase code is valid and belongs to this plugin. Envato answers with the details of the sale, such as the license type and the support period; we use them for the check and do not store them. We store the activation (purchase code, domain and the time of activation) and a log of license checks (purchase code, domain, action, result and time) to enforce the number of activated sites per license and to investigate misuse.
The live demo
The demo store is a WordPress and WooCommerce site with made-up products. It takes no orders and no payments. While you browse it, it uses the cookies listed in section 5.
If you post a product review in the demo, WordPress stores the name, email address and text you enter, together with your IP address and browser identification, so that spam can be filtered and the review moderated. Please do not post personal information in the demo; ask us and we will delete a review you posted.
3. Legal bases for processing
If you are in the European Union, the European Economic Area or the United Kingdom, we rely on these legal bases under Article 6(1) GDPR:
| Processing | Legal basis |
|---|---|
| Server logs | Legitimate interests (f): running a secure, working website. |
| Contact form and email | Steps before a contract or the contract itself (b) when you ask about buying or using the plugin; otherwise legitimate interests (f) in answering messages. You confirm this when you tick the box in the form. |
| License activation, update checks and downloads | Performance of the contract (b): delivering the updates and support that come with your license. |
| License check log | Legitimate interests (f): enforcing the license terms and preventing misuse of purchase codes. |
| Demo store cookies | Strictly necessary for a service you asked for (Article 5(3) ePrivacy Directive), so no consent is required. |
| Records kept for tax or legal claims | Legal obligation (c) and legitimate interests (f). |
Where we rely on legitimate interests, you can object at any time (see section 10).
4. Who receives data
We share personal data only with the service providers we need to run the site, and only as much as each one needs:
| Recipient | What for | Where |
|---|---|---|
| Hetzner Online GmbH | Hosting of the website, the demo, the license server and the mail server. Hetzner processes the data only on our behalf (Article 28 GDPR). | Germany, EU |
| Envato Pty Ltd | Checking a purchase code. Only the purchase code is sent; Envato already holds it from your purchase. | Australia |
| Brevo (Sendinblue SAS) | Delivers our replies to a few email providers (currently t-online.de and magenta.de) that do not accept mail from our server directly. | France, EU |
Apart from that, we disclose data only when the law requires it, for example to an authority with a valid legal order, or to establish or defend a legal claim. If the plugin were ever sold to another developer, the license records would pass to them so that existing customers keep their updates; we would tell you before that happens.
Envato is in Australia, which has no EU adequacy decision. The only data that goes there is the purchase code you received from Envato, sent to check the license you bought from them (Article 49(1)(b) GDPR).
5. Cookies and browser storage
The plugin website and the documentation set no cookies. When you close the cookie notice, your browser remembers that in its local storage (key mpvw-cookie-notice), so the notice is not shown again. That entry stays on your device, is never sent to us, and you can remove it by clearing the site data in your browser. Use to show the notice again.
The demo store uses only the cookies that WordPress and WooCommerce need to work, plus one for the settings panel:
| Cookie | Purpose | Lifetime |
|---|---|---|
| mpvw_demo_panel | The player and gallery options you choose in “Try the settings”, so the page can show them. Contains only those options. | 30 days, or until you press Reset |
| wp_woocommerce_session_* | Keeps your cart while you browse. | 2 days |
| woocommerce_cart_hash woocommerce_items_in_cart | Tell the store whether the cart has changed. | Until you close the browser |
| wordpress_test_cookie | Checks that your browser accepts cookies before logging in. | Until you close the browser |
| wordpress_logged_in_* wordpress_sec_* wp-settings-* | Only if you log in to the demo admin: keep you logged in and remember the admin screen layout. | Session to 1 year |
| comment_author_* | Only if you post a review and ask the site to remember you. | 1 year |
None of these cookies is used for analytics or advertising, and none is shared with other companies. Because they are all strictly necessary, the demo does not ask for consent; you can still block or delete them in your browser, but the cart and the settings panel will then stop working.
Our sites do not respond to “Do Not Track” signals, because there is no tracking for such a signal to switch off.
6. The plugin on your store
If you run the plugin on your own WooCommerce store, you are the controller for your customers' data. Here is what the plugin does, so you can describe it in your own privacy policy:
- Videos stay on your site. Uploaded and converted files are stored in your
wp-content/uploadsfolder and played from there. The plugin uses no outside video host or CDN. - Browser conversion stays in the browser. With the Browser processing mode, the video is converted on the admin's own computer with WebAssembly and only the finished files are uploaded to your site. The converter is part of the plugin, not loaded from another service.
- No visitor tracking. The player on product pages sets no cookies and sends no data about your visitors to us or to anyone else.
- One outside connection. Your site's server contacts
mpvw.gorkovenko.netonly for license activation, update checks and update downloads, sending the data listed in section 2. No data about your customers is included.
Suggested text for your store's privacy policy:
“Product videos on this site are stored on and played from our own server. Watching them does not set cookies or send your data to a third party.”
7. How long we keep it
We keep personal data only as long as we need it for the purpose it was collected for:
| Server logs | 14 days, then deleted automatically. |
|---|---|
| Contact form spam counter | 1 hour. |
| Messages and our replies | As long as the conversation is ongoing, then up to 2 years so we can refer back to an earlier support case, unless you ask us to delete them sooner. |
| License activations | Until you deactivate the plugin on that domain. |
| License check log | 24 months, then deleted automatically. |
| Demo store reviews | Until they are deleted from the demo, or on your request. |
We keep data longer only where the law requires it or where it is needed to establish, exercise or defend a legal claim.
8. How we protect it
All traffic to the site, the license server and the mail server is encrypted with TLS. The servers are updated regularly, each site runs under its own system user with access only to its own files, configuration files with credentials cannot be reached from the web, and the servers are backed up daily. Access is limited to the developer.
No method of transmission or storage is completely secure. If a breach affects your data and is likely to put your rights at risk, we will tell you and the supervisory authority as the GDPR requires.
9. Children
The plugin and this site are made for businesses. We do not knowingly collect data from anyone under 16. If you believe a child has sent us personal data, tell us and we will delete it.
10. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and get a copy (Article 15);
- have inaccurate data corrected (Article 16);
- have your data deleted, for example a message or a license activation (Article 17);
- restrict how we use it while a question is being resolved (Article 18);
- receive data you gave us in a portable format (Article 20);
- object to processing based on legitimate interests (Article 21);
- withdraw consent at any time, where processing is based on consent, without affecting what happened before.
To use any of these rights, write to contact@gorkovenko.net or choose “Privacy or my data” in the contact form. For anything about a license, include the purchase code or the domain so we can find the records; we may ask you to confirm that the license is yours. We answer within one month.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work. The list of authorities is on the European Data Protection Board website.
11. Changes to this notice
We update this notice when the site, the plugin or the law changes. The date at the top shows the latest version. If a change affects how we use data you have already given us, we will say so on this page before it takes effect.
12. Contact
Questions about this notice or about your data: contact@gorkovenko.net, or the contact form with the topic “Privacy or my data”.