Privacy Policy

This policy explains what the GreenScore WP plugin, the GreenScore WP service behind it, the Expert Fix service and this website (greenscorewp.com) collect, why, and what happens to it. "GreenScore WP", "we", "us" and "our" mean the service and the team that runs it.

Questions or requests about your data: support at greenscorewp.com.

The short version

• The plugin sends nothing until you click Check page speed.
• We receive your homepage address, PageSpeed scores and findings, and a few facts about your site setup. Never the content of your pages, and never passwords.
• Google PageSpeed Insights tests your homepage. Anthropic's AI writes the plain-English explanations from a list of problems that has no personal data in it.
• Gumroad handles payments. We never see your card.
• This website sets no cookies and runs no analytics or tracking scripts.
• We don't sell your data and we don't use it for advertising.

1. The free plugin

The plugin talks to the GreenScore WP service, which runs on Cloudflare Workers and stores its data in a Cloudflare D1 database. Here is what is sent and when.

Connecting your site (your first click on "Check page speed")

The plugin sends your homepage address, your WordPress version and the plugin version. To prove the request comes from your site, the service then loads one address on your site that answers with a one-time code for 10 minutes. The service gives your site a site key, which is stored in your WordPress database. We store your site address, the WordPress and plugin versions, and a hash of the site key (never the key itself). The one-time codes are deleted within an hour.

Each speed check

When you click "Check page speed", and once a week if you switch on the weekly check, the plugin sends your homepage address and your site key. The service asks Google PageSpeed Insights to test that page on mobile and desktop and returns the scores and findings to your site. We store the address checked, the date and the scores of each check. We don't store the full PageSpeed report.

The weekly score-drop email is sent by your own WordPress site to its admin email address. It does not pass through us.

Plain-English explanations

After each check, the plugin sends the scores, the list of problems found (their names, estimated savings and a one-line description) and some site setup facts: page builder, theme name, cache plugin name, whether WooCommerce is active and how many protected pages there are. The service sends this list of problems to Anthropic's API (Claude) to write the explanations. No content of your pages and no personal data is sent. We keep each answer for 7 days so the same check is not explained twice, then delete it.

What the plugin does on your own site

The plugin loads your own homepage and pages to look at their images, fonts and scripts, and to test them after each fix. Those requests stay between your site and itself. Backups, settings and check history the plugin keeps are stored in your own WordPress database. Deleting the plugin removes them.

2. Expert Fix and Expert Access

Help requests

When you send an expert help request (only when you click "Continue to payment" in the plugin), we receive your email address, your description of the problem, the page you picked, and, if you leave the box ticked, a diagnostic report. The report holds your speed scores, the problems found, the fixes switched on, the number of backups, your WordPress and PHP versions, your theme, and the names and versions of your active plugins. It never holds passwords. The plugin shows you exactly what is sent before you send it.

We store the request and the messages between you and our team so we can do the work, and email it to our team's mailbox.

Payments

Payments are handled by Gumroad on its own checkout page. We never see or store your card details. When you paste the licence key from your Gumroad receipt into the plugin, the service checks it with Gumroad. We store only a hash of the licence key and the Gumroad sale ID, to link the payment to your request.

Expert Access add-on

When you allow access, switch it off, and twice a day while access is on, the add-on sends your site address and your licence key to the service to open, close and check the 14-day access window. While access is on, our speed engineers can read and change things on your site as described on the Expert Fix page, to fix the problem you paid for. The add-on leaves out passwords, keys, wp-config.php and customer data such as orders and form entries.

The add-on keeps an activity log of every action, and a copy of everything before it is changed, on your own site. You can read the log at any time on the Expert Access screen. Deleting the add-on removes it.

3. This website

greenscorewp.com sets no cookies, uses no analytics, and loads no outside fonts, scripts or trackers.

Cloudflare hosts the website and, like any web host, processes connection data such as your IP address to deliver pages and protect the site from abuse. We use your IP address only to limit how many contact messages can be sent in a minute. We don't store it.

Contact form

When you use the contact form, your name, email address and message are sent as an email to our team's mailbox. The website itself stores nothing. We use your message only to reply to you, and keep the email as long as we need it to help you.

4. Who else processes data

• Cloudflare runs the GreenScore WP service, its database, this website, and the delivery of our notification emails.
• Google runs PageSpeed Insights, which receives your homepage address and tests it. Our team mailbox is hosted on Google Workspace. Google's privacy policy.
• Anthropic receives the list of problems found (no personal data) to write the explanations. Anthropic's privacy policy.
• Gumroad handles payments for Expert Fix. Gumroad's privacy policy.

These providers may process data in countries other than yours, including the United States.

5. How long we keep data

• One-time connection codes: deleted within an hour.
• AI explanations: 7 days.
• Your site record and check history (site address, versions, dates and scores): while you use the plugin. Ask us and we delete them.
• Help requests, messages and diagnostic reports: as long as we need them to deliver and support the fix you paid for. Ask us and we delete them, except what we must keep for payment records.
• Contact form emails: as long as we need them to answer you.

6. Your choices and rights

You can stop sending data at any time by deactivating or deleting the plugin. Deleting it removes everything it stored on your site. You can ask us to tell you what we hold about your site or you, correct it, or delete it. Email support at greenscorewp.com from the address you used, or tell us your site address, and we will handle it.

Depending on where you live, you may also have the right to object to or restrict processing, to receive your data in a portable form, and to complain to your data protection authority.

7. Security

Data travels over HTTPS. Site keys and licence keys are stored only as hashes. The Google PageSpeed and Anthropic API keys stay on our service and never reach your site.

8. Children

GreenScore WP is for website owners and is not directed at children.

9. Changes

If we change this policy, we update it here and change the date at the top.