Privacy Policy

This policy explains what information WebCmdr collects when you use webcmdr.com or a site hosted on it, and what we do with it. Each site is run by its own owner, who may collect information too; their own policy covers that.

What we collect

• Account details: your username, email address, a scrambled (hashed) copy of your password, and your phone number if you use text message codes.
• What you put on WebCmdr: your sites, posts, uploads, messages and settings.
• Purchases and plans: what was bought, when and for how much. Card details go straight to the payment provider (Stripe or PayPal); we never see or store full card numbers. When a form asks for a card on file, the card is entered on Stripe's page and saved in the site owner's Stripe account. The site keeps the card's brand, last four digits and expiry, the billing name, address, email and phone Stripe collected, and a record of the terms agreed to, with when and a scrambled copy of the IP address. This lets the owner charge the card as agreed and answer disputes. Billing address and phone are deleted 180 days after the card is removed and last charged.
• Technical information: IP address, browser type and the pages requested, used to keep WebCmdr secure, stop abuse and fix problems.
• Uploads: for every file uploaded to a site, which account uploaded it, the IP address and browser it came from, when, and a fingerprint (hash) of the file. We use this only to keep WebCmdr safe and to answer legal requests.
• Reports: what you tell us in a report, and your name and email if you give them. We keep a scrambled copy of your IP address only to stop report spam.
• Linked Gmail: if a site owner links Gmail, the Gmail address and Google's access tokens for it (see below).

Cookies

We use cookies to keep you logged in, protect forms from misuse, and remember that you confirmed your age on an 18+ site. We don't use advertising cookies. A site owner may add their own tools, such as Google Analytics or ads, which set their own cookies.

How we use it

• to run your account and sites, and deliver what you buy;
• to send emails you need, such as receipts, password resets and notices about your site;
• to keep WebCmdr safe, review reports and follow the law.

Images uploaded to a site may be checked automatically against known child sexual abuse imagery, using Microsoft's PhotoDNA service. A match is blocked or removed, and reported as the law requires.

We don't sell your information.

Who we share it with

Only with the services that help us run WebCmdr, and only what they need:

• hosting and storage (OVHcloud, Cloudflare);
• payments (Stripe, PayPal);
• Microsoft, when uploaded images are checked against known child sexual abuse imagery (PhotoDNA);
• email and text message delivery;
• Google, when a site owner links Gmail;
• the owner of a site you join or buy from, who sees your username and what you do on their site;
• police or authorities, when the law requires it or to protect someone from harm.

Google account data (Gmail)

A site owner can link a Gmail account in Site Settings so that the site's emails to its customers (receipts, store, gift card and client portal emails, booking emails and newsletters) are sent from that Gmail address. Google then asks the owner to let WebCmdr send email on their behalf. That is the only Gmail permission WebCmdr asks for, along with the account's email address, so we can show which account is linked.

• What we use it for: only to send the emails your site sends, from your Gmail address, as you set them up in WebCmdr. WebCmdr never reads, searches, changes or deletes anything in your mailbox; the permission only allows sending. Gmail keeps a copy of each message in your Sent folder, as it does for any email you send.
• What we store: your Gmail address, Google's ID for the account and whether it is a Google Workspace account, and the access tokens Google gives us, which are encrypted. We also count how many emails we send through it each hour, to stay under Google's daily limits. Nothing else Google returns is kept.
• Who sees it: it isn't shared, sold, used for advertising, or used to develop, improve or train AI or machine-learning models. People at WebCmdr don't read it, except where you ask us to, where needed for security, or to comply with the law.
• Removing it: Disconnect in Site Settings deletes that site's tokens and, once no other site uses that Gmail, asks Google to remove WebCmdr's access. You can also remove WebCmdr at myaccount.google.com/permissions, and your site's emails then go from WebCmdr's address again. Deleting the site deletes them too.

WebCmdr's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How long we keep it

We keep your information while your account is open. When you delete your account or a site, we delete its information, except what we must keep by law, such as payment records and records about illegal content.

Upload records stay with the file for as long as it is stored. When content is reported to the authorities, we keep it and its records for at least a year, as the law requires, even if it is deleted from the site.

Your choices

You can see and change most of your information in your account settings. To get a copy of your information, or to have it deleted, contact us at our report and contact form.

Children

WebCmdr is not for children under 13. If we learn that a child under 13 has an account, we delete it.

Changes

If we change this policy in an important way, we'll tell account holders by email or on their dashboard.

Contact

Questions about privacy: our report and contact form.