Privacy Policy
What wpreturns.com and the WPReturns plugin collect, where that data goes and how to reach DevDiggers about it.
Last updated November 2, 2026
wpreturns.com collects very little. It is a static site served through Cloudflare. It sets no cookies of its own and counts visits with a cookieless analytics tool.
The WPReturns plugin keeps your store’s data in your own WordPress database. Purchases happen on devdiggers.com under the DevDiggers Privacy Policy, which governs if the two pages differ.
Who is responsible for your data
DevDiggers Technologies runs wpreturns.com and sells WPReturns Pro.
- Address: 548, Sector 12D, Awas Vikas Colony, Bodla, Agra, Uttar Pradesh, India, 282007
- Email: support@devdiggers.com
- Contact page: devdiggers.com/contact
DevDiggers does not sell your personal data.
What wpreturns.com collects
Hosting and security
Every request to this site passes through Cloudflare. To deliver a page, Cloudflare processes your IP address, browser user agent and the address you requested. Cloudflare may log IP addresses to detect and block attacks.
Cloudflare handles this data under the Cloudflare Privacy Policy. Cloudflare may process it in its United States data centers.
Analytics
The site counts visits with Umami Cloud, run by Umami Software. It uses no cookies and does not track you across other sites.
Umami records the page you view, the referring site, your country and your device and browser type. It also counts a few clicks such as Download free and Buy Now.
Umami uses your IP address briefly to count unique visitors and work out the country. It is not saved in the analytics records, though Umami may keep it in short-term security logs. The data is stored in Umami’s European Union region and kept for 6 months.
DevDiggers uses this to see which pages help store owners, based on its legitimate interest in running the site (GDPR Article 6(1)(f)). Umami processes the data under its Data Processing Agreement and privacy policy. To opt out, block cloud.umami.is in your browser or use a content blocker.
Newsletter form
When you subscribe, your email address goes to the DevDiggers FluentCRM system on devdiggers.com. Your name goes too if you give it. DevDiggers uses it to send WPReturns and DevDiggers updates.
Every email has an unsubscribe link. You can also ask DevDiggers to remove you.
Contact form
The contact form sends your name, email address and message to the same FluentCRM system on devdiggers.com. It also sends your site URL if you enter one. DevDiggers uses this to reply to you.
Browser storage
When you close the announcement bar, your browser stores a small flag so the bar stays closed. This flag never leaves your browser.
The documentation pages may also remember your theme choice. The Cookie Policy lists every item.
Documentation search
Docs search runs inside your browser using Pagefind. Your search terms are never sent to a server.
Purchases on devdiggers.com
You buy WPReturns Pro on devdiggers.com. DevDiggers collects your name, email address and billing address at checkout. Payment details go to PayPal, Stripe or Razorpay.
DevDiggers does not store your full card details.
DevDiggers also keeps your order history, license keys, support tickets and the site URL where each license is active. The DevDiggers Privacy Policy covers all of this in full.
What the WPReturns plugin sends
Your store data stays on your server
WPReturns stores return requests, messages and withdrawal statements in your WordPress database. Uploaded photos and files go to a private folder on your server. Emails go out through the WooCommerce mailer.
DevDiggers has no access to your customers or their return requests.
The WPReturns Pro license and update check
WPReturns Pro checks for updates with the DevDiggers license server on devdiggers.com. Each check sends your site URL, the plugin version and your license key. It runs when WordPress checks for plugin updates.
The DevDiggers Privacy Policy notes that the license check may also send your WordPress version. It sends no data about your store’s visitors or customers.
Shipping labels from EasyPost or Shippo
This applies only if you connect EasyPost or Shippo under Configuration > Shipping Labels. When a return label is bought, your server sends the label request straight to the provider. DevDiggers never receives it.
The request includes the customer’s name, address, phone and email. It also includes your store’s return address and the package size and weight. Data sent to EasyPost or Shippo falls under that provider’s terms and your account with them.
The free plugin
The free WPReturns plugin has no license checks, no update checks and no telemetry. Its admin screens make three requests, all inside the WordPress admin:
- The DevDiggers Extensions page loads a public list of extensions from devdiggers.com at most once a day. Only your server’s IP address and a user agent are sent.
- The optional newsletter form on the DevDiggers Plugins dashboard sends the email you enter and your site URL. Nothing is sent unless you submit it.
- Gravatar avatars load through WordPress core when avatars are on under Settings > Discussion.
Your store’s own privacy policy
Your customers’ data belongs to your store. Your store’s privacy policy should mention return requests and any label provider you turn on.
How long data is kept
DevDiggers keeps account and order data while your account is active or while it is needed for support. Some records are kept longer for tax, accounting, refund disputes or fraud prevention. The DevDiggers Privacy Policy explains retention in full.
Analytics data is kept for 6 months.
For how long newsletter and contact form data is kept, contact DevDiggers.
Your rights
Where you live decides whether you have the right to:
- Get a copy of the personal data DevDiggers holds about you
- Correct data that is wrong or incomplete
- Ask DevDiggers to delete your data unless the law requires it to be kept
- Stop marketing emails at any time
- Get an export of the data you provided
Email support@devdiggers.com or use the contact page to make a request. DevDiggers aims to answer within 30 days. DevDiggers complies with the GDPR to the extent it applies to its operations.
Security
DevDiggers uses HTTPS and limits staff access to customer data. No system is fully secure. Use a strong and unique password for your DevDiggers account.
Children
This site and WPReturns are not aimed at children under 13. DevDiggers does not knowingly collect data from children. If you believe a child has sent personal data, contact DevDiggers and it will be removed.
Changes to this policy
We update this page when the site, the plugin or the DevDiggers Privacy Policy changes. The date at the top shows the latest version.
Contact
Privacy questions go to support@devdiggers.com or the DevDiggers contact page.