This policy describes what BucketWP collects, why, and how to get rid of it. It is written against what the code actually does: every tool on this site runs in your browser, so most of the time there is nothing to collect.
What never leaves your browser
Field values, generated output and share links are built in the page itself. What you type into a tool is not sent to us, not logged, and not saved to any account. Nothing is uploaded that can be done in the browser, and each tool says so on its own page.
Secrets that generators produce, such as wp-config.php salts, are created by your browser’s cryptographic random number generator when the page loads. They are never part of the page our server sends, so we could not know them.
What your browser stores for you
| Item | Where | How to remove it |
|---|---|---|
| Recent searches | Local storage (bwp-spotlight-recent) | Clear in the search panel |
| Light or dark theme choice | Local storage (bwp-theme) | Clear site data for this site in your browser |
| Whether you already rated a guide | A cookie for that one page | Clear cookies for this site |
These stay on your device. We cannot read them, and clearing them costs you nothing but the convenience they provide.
What we do collect
How often a tool is used
When you first interact with a tool, the page increments a counter for that tool. It is a number per tool per day and nothing else: no identifier, no address, no record of what you typed. We use it to decide which tools to improve and which to retire.
Whether a guide helped
Answering Was this technical guide helpful? adds one to that page’s yes or no count. To stop one person voting repeatedly, we keep a salted hash of your IP address together with the page for 30 days. The address itself is never stored, and a hash cannot be turned back into one.
Your email, if you give it to us
If you subscribe, we store your email address to send you occasional updates about new tools. It is held on this site and in our mailing software, Sendy, which we run ourselves rather than handing your address to a third-party marketing platform. Every email includes an unsubscribe link, which removes you immediately. You can also write to us and ask.
The few tools that need a server
A small number of tools cannot work in the browser because they have to make a network request, such as looking up a domain’s mail records. For those, the domain or URL you enter is sent to our server to perform the lookup. We use it to answer that one request. These tools are labelled on their own pages, and every one of them tells you what it sends before you run it.
How you found us, and which pages you read
We use Google Analytics, loaded through Google Tag Manager, to see which tools get used and where visitors come from. It records the page you are on, roughly where in the world you are, and what kind of device and browser you use. It does not receive anything you type into a tool, because that never leaves your browser in the first place.
Google is a processor for this and sets its own cookies. You can opt out for every site with Google’s browser add-on, or by blocking the script in your browser or an extension. Nothing on this site stops working if you do.
Ordinary server logs
Like any website, our host and our CDN record requests, including IP addresses, to serve pages and to block abuse. These are standard operational logs, kept for a short period, and not used to build a profile of you.
What we do not do
- We do not sell or rent your data.
- We do not store what you type into a tool.
- We do not require an account to use any tool.
- We do not use advertising cookies, and we do not sell or share what we measure for advertising.
Your rights
You can ask us what we hold about you, ask for it to be corrected, or ask for it to be deleted. In practice the only thing we are likely to hold is an email address, and unsubscribing removes it. Contact us using the address below and we will answer.
Changes and contact
If this policy changes in a way that affects what we collect, the date below changes with it. Questions about privacy, or a request about your data, go to [email protected].
For the technical detail behind all of this, see Privacy and data in the documentation.