Who We Are
EDGE22 Studios Ltd. provides the GeneratePress WordPress themes and plugins and operates this website. EDGE22 Studios Ltd. is a corporation registered in Alberta, Canada, and is the data controller responsible for the personal information we collect and use for our own purposes.
We handle personal information in accordance with applicable privacy laws, including Alberta’s Personal Information Protection Act (PIPA), Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), the European Union’s General Data Protection Regulation (EU GDPR) and the United Kingdom General Data Protection Regulation (UK GDPR), where applicable.
Our payment providers and any authorized reseller acting as merchant of record have their own privacy responsibilities, as described below. For any privacy-related questions, you can reach us at support@generatepress.com.
Who We Share Your Data With
We do not sell or rent your personal information.
We use service providers and other organizations to operate our website, deliver products and messages, provide support, and manage purchases. Their privacy roles depend on the services they provide. Some process information on our instructions; others act as independent data controllers for their own responsibilities. The principal services are described below, with links to their privacy notices.
Team members, contractors, and service providers receive information needed for their work and are subject to appropriate confidentiality and data-protection obligations. Payment providers and any authorized reseller acting as merchant of record receive information needed for the relevant transaction and their legal obligations.
If you consent to affiliate tracking, limited visit and referral information may also be available to the affiliate who referred you, as described in the Affiliates section below.
We may disclose information when required by law, in response to a valid legal request, or where necessary and lawful to investigate fraud or security incidents, protect people, or establish, exercise, or defend legal claims. Professional advisers may receive information needed to provide legal, accounting, or other professional services.
If we propose to use your information for a new purpose, we will provide any notice and obtain any consent required by applicable law.
International Transfers
Our business is based in Canada. Our service providers and authorized team members may process information in other countries, including the United States. Privacy laws in those countries may differ from the laws where you live.
Where required, we use contractual or other legally recognized safeguards for international transfers. The appropriate mechanism depends on the recipient and transfer, and may include an applicable adequacy decision or approved contractual safeguards. You can contact us for details of the safeguards relevant to your information and how to obtain a copy where applicable. Using our website does not, by itself, constitute consent to a transfer that requires separate consent.
Cookies
A cookie is a small amount of information stored on a visitor’s device and returned to a website on later requests. We use cookies and similar technologies for necessary functions such as security, fraud prevention, account access, checkout, and remembering preferences. We also use optional technologies in the limited circumstances described below.
Where we offer a consent control, you can accept or decline the optional technology and change your choice later through the corresponding settings control. We use a preference cookie to remember the choice you make so that we do not repeatedly ask you. You can also manage cookies through your browser, although blocking necessary cookies may prevent some features from functioning correctly.
What Personal Data We Collect And Why We Collect It
Registered Users
If you create an account on our site, you will be prompted to select a Username and provide your Email Address. When choosing a Username, we strongly advise you not use or include your real name. Usernames cannot be changed.
Your Username and Email Address are stored in the website’s database. Your Email Address is used to send you an email with a link to set your password or to send you an email with a link to reset your password in the event you forget your password.
Where Gravatar is used to display profile images, a hash derived from your email address is sent to that service to look for a matching image. A hash is not necessarily anonymous: it may allow Gravatar to associate the request with its records. See Automattic’s Privacy Policy.
You may optionally complete your Profile by providing your First Name, Last Name, Website (URL) and/or Biographical info. These additional details are also saved in the website’s database. You may edit these details, and your Email Address, in your Profile at any time. You may also choose how your name is displayed (your Display Name) to visitors to the site (e.g. in comments you create) in your Profile.
Your Username, First Name, Last Name and Email Address are accessible by our team on the site.
If you attempt to log in to our site, we will set a temporary cookie to determine if your browser accepts cookies at all. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
We retain profile information to operate your account. You can update available profile fields through your account or contact us to request correction or deletion. Retention and any lawful exceptions to deletion are described below.
Publishing Content (Comments, Pages, Posts, Forums)
Your Profile Picture (Gravatar), Display Name, Website (URL) (if any) and Biographical Info (if any) may be visible to visitors to the website (e.g. if you leave a comment, forum post, or contribute an article/post).
If you author an article/post, your Username, User ID, Profile Picture (Gravatar), Display Name, Website (URL) (if any) and Biographical Info (if any) are provided to any visitor using the website’s REST API interface.
If you upload media (e.g. images) to the website (in forums, posts, or comments), you should avoid uploading images with EXIF GPS location data included. Visitors to the website can download and extract any location data included in images on the website. Visitors using the website’s REST API interface can correlate uploaded media to a particular user. This may allow such visitors to map a user to a particular time and location if EXIF GPS location data was included in the uploaded media.
If you edit or publish an article/post, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
When visitors leave comments on one of our sites we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
Comments may require manual approval by one of our team members or site owners. If you leave a comment on a site you may opt-in to saving your name, email address and website in cookies so we can recognise you as a commenter. These cookies will persist for one year.
Additional spam detection is provided by Automattic/Akismet. The Automattic privacy policy is available here: https://automattic.com/privacy/.
Published content and comments may remain until they are removed. Requests to remove personal information are assessed under applicable law, as described below.
Forum posts and replies are public, except for information submitted through fields specifically designated as private. When you post, we process your account information, submitted content, and request IP address to provide support, moderate discussions, and prevent abuse. Information in private support fields is accessible to our support team. Use any available editing controls or contact us to request correction or removal of your personal information.
Email/Contact Forms
We use Google Workspace to process all internal email and communication with our customers. Google’s privacy policy is available here: https://policies.google.com/privacy.
If you email us or submit a contact form, we process your contact details, message content, and relevant account or purchase information to respond and maintain a record of the conversation. Form submissions may also include an IP address and technical information used for security and spam prevention. Communications are stored in Google Workspace and our help desk service, Help Scout. The Help Scout privacy policy is found here: https://www.helpscout.com/company/legal/privacy/.
Embedded Content From Other Websites
Embeds are pieces from other websites that are shown from time to time on our websites. They behave in the exact same way as if the visitor has visited the other website and may use cookies or capture information. Typically embedded content is from websites that share videos, images, or other content. These services may collect your IP Address, your User Agent, store and retrieve cookies on your browser, embed additional third-party tracking, and monitor your interaction with that embedded content, including correlating your interaction with the content with your account with that service, if you are logged in to that service.
Links to the privacy policies of the most common services have been included below.
Analytics
We use Fathom Analytics to understand visits and improve our website. Fathom’s website analytics does not set analytics cookies. It processes request information, including an IP address and browser user-agent, to derive site-specific statistical information. Our reports describe website usage rather than named visitor accounts.
This does not mean that no information is processed or that no analytics records are retained. Fathom describes its collection and handling of information in its data documentation. Where permitted, our legal basis is our legitimate interest in understanding and improving our website.
Marketing Campaigns
We use email marketing to communicate with customers and potential customers from time to time. All email lists and campaigns are “opt-in” meaning we will not send you these sorts of emails unless you indicated that you wish to receive them during signup or other interactions on our website.
We may send you “system” emails, such as password reset requests or payment notifications/receipts even if you have not opted-in to email marketing lists.
All marketing emails include an unsubscribe link. Emails may include open and click measurement, subject to applicable consent requirements, to help us understand engagement and improve communications. Unsubscribing stops future marketing emails; necessary service and billing messages may still be sent, and limited suppression information may be retained to respect your choice.
We manage our email lists and newsletters using FluentCRM, a self-hosted system. Subscriber records and preferences are stored in our website database.
Email delivery uses Amazon Simple Email Service (Amazon SES), provided by Amazon Web Services (AWS). AWS processes recipient addresses, message content, and associated delivery information. See the AWS Privacy Notice.
We may utilize social media and web advertising campaigns. These service providers use cookies on our sites and/or pixel tracking to serve ads across the different platforms. Google: https://policies.google.com/privacy X (Twitter): https://x.com/en/privacy Facebook: https://www.facebook.com/about/privacy/
If we activate advertising cookies or pixels that require consent, we will provide the required notice and choice before using them.
Payments and Purchases
For purchases made directly from EDGE22 Studios Ltd., we use Stripe and PayPal to process payments, as applicable. Those providers handle the information needed to process and manage payments and meet their own obligations. See Stripe’s Privacy Policy and PayPal’s Privacy Statement.
Where you purchase through an authorized reseller acting as the merchant of record, that reseller is the seller responsible for the transaction. Its identity and privacy policy will be provided at checkout. The reseller handles information for payment processing, subscription management, refunds, fraud prevention, invoicing, and tax compliance.
We exchange information needed to fulfil and support purchases with the applicable payment provider or reseller. Depending on the transaction, the information we or the seller collect may include:
- Name and email address: to identify your purchase, provide access, and communicate with you.
- Account details: such as your username, to connect purchases to your account and provide downloads and support.
- Billing information: such as an address, country, province or region, and postal code, to process payments, assess tax, and help prevent fraud.
- Business and tax details: where relevant, to apply the appropriate tax treatment and provide billing documents.
- Purchase and subscription information: such as products, amounts, currency, transaction references, payment status, and renewal details, to fulfil purchases and manage ongoing access.
- Payment details: collected by the relevant payment provider for the method you choose. For a Stripe card payment, card details are handled by Stripe. Other payment methods or reseller purchases are handled by their respective providers. Full card numbers and card security codes are not stored on our website.
We keep account, order, license, subscription, and support records to provide access, manage renewals and refunds, resolve payment issues, and meet relevant recordkeeping obligations. Information received from a payment provider or reseller is used for these same purposes.
A reseller acting as merchant of record processes information as an independent data controller for its own responsibilities. Payment providers may also act independently for certain purposes. EDGE22 Studios Ltd. remains responsible for its handling of information used to provide your account, products, licenses, and support.
We load Stripe.js across our website, not only at checkout, to help Stripe and us secure our payment services, detect and prevent fraud, and reduce unauthorized transactions and chargebacks. Stripe may process information such as your IP address, device and browser characteristics, transactional information, and activity signals, including through cookies and similar technologies. Stripe identifies m, __stripe_mid, and __stripe_sid among the cookies it may use for fraud prevention. The exact cookies and their duration depend on the Stripe services and configuration in use. You can learn more in Stripe’s Privacy Center and Cookie Policy. We use this processing for payment security and fraud and loss prevention.
You may also be asked whether you want marketing updates. If you opt in, your details are added to our newsletter list in FluentCRM. Declining marketing does not prevent you from purchasing or receiving necessary account and billing messages.
Web Services
Our website hosting is provided by Rocket.net (operated by onRocket.com, LLC). This includes website hosting, backups, databases, file storage, and related infrastructure. Rocket.net’s privacy policy can be found here: https://rocket.net/privacy-policy/
Our website traffic is served and proxied through Cloudflare’s global network. Cloudflare’s privacy policy can be found here: https://www.cloudflare.com/privacypolicy/
Our website and infrastructure services may maintain technical and security records, including request IP addresses, browser information, timestamps, requested URLs, and error details. These records help us operate the service, investigate faults, prevent abuse, and protect accounts.
License Keys and Automatic Updates
When your website activates or checks a license or requests a product update, our licensing systems process information such as the license key, website URL, request IP address, and product information. These records allow us to validate access, provide updates, manage site activations, and investigate licensing problems or abuse.
Where a purchase or license is used across GeneratePress and GenerateBlocks, both operated by EDGE22 Studios Ltd., relevant purchase and license information is used across those services to provide the access and support included in your purchase.
You can install updates manually using the downloads available through your account instead of enabling automatic updates. For GP Premium, see our manual update instructions. Manual updates do not remove existing account, purchase, or license records. Contact us if you want to request access to or deletion of your personal information.
Affiliates
If you come to our site through a valid affiliate referral link, we ask whether you agree to optional affiliate tracking. Unless and until you select “Accept affiliate cookies,” AffiliateWP does not set affiliate tracking cookies or record an AffiliateWP visit or referral attribution as a result of that link. Declining does not affect your ability to use our website or the price you pay.
We use the following first-party cookies for this feature:
gp_affiliate_consentremembers whether you accepted or declined affiliate cookies for 180 days. It is set after you make either choice and is used only to remember that preference.affwp_refidentifies the referring affiliate for 30 days after you accept.affwp_ref_visit_idconnects your browser to the recorded affiliate visit for 30 days after you accept.affwp_campaign, when applicable, remembers an optional affiliate campaign identifier for 30 days after you accept.
If you accept, we record the referring affiliate, the landing-page URL, the referring URL, an optional campaign identifier, your IP address, and the visit date and time. If the visit results in a purchase, we connect the visit to the resulting referral, order, and commission. We use this information to attribute referrals, administer commissions, prevent and investigate fraud, audit the affiliate program, and resolve disputes.
The referring affiliate may see limited program information, including landing and referring URLs, visit and referral dates, conversion status, purchased product descriptions, commission amounts and statuses, and an order reference. We do not provide the affiliate with your name, email address, billing information, or payment details through the Affiliate Area.
For EU and UK visitors, we rely on your consent for optional affiliate tracking. If a tracked purchase occurs, we may also process the resulting referral and transaction records as necessary for our legitimate interests in administering the affiliate program, preventing fraud, and resolving disputes, and to meet applicable accounting, tax, and other legal obligations.
You can change your choice at any time through the “Affiliate cookie settings” control. Changing your choice to decline removes the affiliate tracking cookies and stops future AffiliateWP tracking and attribution. Withdrawal does not affect the lawfulness of processing completed before withdrawal, and records associated with completed purchases or commissions may still be retained where necessary for accounting, fraud prevention, dispute resolution, or legal compliance.
We retain affiliate visit and referral records only for as long as reasonably necessary for those purposes. Records connected to completed purchases and commission payments may be retained for the applicable accounting and tax record-retention periods. When records are no longer required, they are deleted or de-identified unless they must be preserved for a legal claim or other legal requirement.
Legal Bases for Processing
Where applicable privacy law requires a legal basis, we rely on the basis appropriate to the purpose:
- Contract: creating and managing accounts, fulfilling purchases, providing licenses and support, and administering subscriptions you request.
- Legal obligations: keeping required financial and tax records, responding to lawful requests, and meeting other applicable obligations.
- Legitimate interests: securing our services, preventing fraud and abuse, resolving disputes, responding to enquiries, and understanding and improving our website, where those interests are not overridden by your rights.
- Consent: sending marketing communications and using optional technologies where consent is required. Our affiliate-tracking consent and related processing are explained in the Affiliates section above.
How Long We Keep Information
Retention depends on the type of record and why it is needed. We consider the service being provided, applicable legal requirements, outstanding disputes or transactions, and whether identifying details are still necessary.
- Accounts and profiles: records are kept while an account remains open. You can request closure or deletion; related records may need to remain for the purposes described below.
- Purchases, subscriptions, and licenses: records are kept as needed to provide purchased rights and support, reconcile payments, and meet accounting, tax, dispute, or fraud-prevention requirements.
- Public content: posts and comments may remain until removed. Requests to remove personal information are assessed under applicable law.
- Support and security: records are kept as needed to resolve requests, maintain relevant service history, and investigate or defend against abuse or claims.
- Marketing: subscription information is kept while you subscribe, with limited information retained where needed to record consent or respect an unsubscribe request.
- Affiliate activity: the retention purposes for visit, referral, and commission records are described in the Affiliates section above.
A deletion request may result in personal details being removed or anonymized while necessary financial or service-history records are retained. We will explain any applicable exception. Information in backups may persist until those backups are replaced or expire; contact us for information about retention relevant to your request.
What Rights You Have Over Your Data
Depending on the law that applies to you, you may have rights to request access to your information, correct inaccurate information, request deletion, restrict processing, receive certain information in a portable format, or object to particular uses. These rights are subject to the conditions and exceptions in applicable law.
You may object to processing based on legitimate interests, including profiling based on those interests, on grounds relating to your situation. You may object to direct marketing at any time.
Where we rely on consent, you may withdraw it. Use the unsubscribe link for marketing emails, the “Affiliate cookie settings” control for affiliate tracking, any other available privacy controls, or contact us. Withdrawal does not affect processing that was lawful before consent was withdrawn.
Your information may include account and profile details, submitted content, support communications, purchase and payment history, licensing activity, and relevant technical or affiliate records. You can use available account or editing controls, or contact us for help accessing, correcting, or requesting removal of information.
Send requests to support@generatepress.com. We may ask for proportionate information to verify your identity and locate the relevant records. We respond within the period required by applicable law and explain any lawful limitation or extension.
You can complain to the privacy regulator responsible for your situation. This may include the Office of the Information and Privacy Commissioner of Alberta, the Office of the Privacy Commissioner of Canada, the UK Information Commissioner’s Office, or your local European data-protection authority.
Payment providers and resellers may hold information for their own purposes. Their privacy notices explain how to exercise rights in relation to that information. Contact us if you need help identifying the provider involved in your purchase.
How We Protect Your Data
The security and reliability of our service is our number one priority.
See WordPress’s security information for details on the security of WordPress core.
Prevention is best when it comes to security, and as a first step, we follow all WordPress Code Standards in the plugins that we build and use.
All team members only have access to systems that are directly required to complete the functions of their job.
All team members (including any contractors) undergo initial training to ensure proper understanding of all security-related processes.
What Data Breach Procedures We Have In Place
Should any event occur where customer data has been lost, stolen, or potentially compromised, our policy is to alert affected customers by email without undue delay after our team becomes aware of the event. We will also report the incident to any relevant data-protection authority where required and comply with the notification deadlines set by applicable law. We will work closely with any customers affected to determine next steps such as any end-user notifications, needed patches, and how to avoid any similar event in the future.
Privacy Policy Changes
We may update this policy to reflect changes in our services, providers, or legal obligations. We publish updates on this page and provide any additional notice or obtain any consent required by applicable law.
Changelog
September 25, 2026 – Added generic reseller and merchant-of-record disclosures; clarified payment information, retention, international transfers, and privacy rights; corrected Gravatar, analytics, email-delivery, and license-update explanations.
August 2026 – Added disclosures for optional affiliate tracking and consent preferences, corrected the affiliate cookie lifetime to 30 days, explained limited information made available to referring affiliates, added Stripe fraud-prevention disclosures, and added Alberta’s PIPA.
June 2026 – Updated entity references to reflect that EDGE22 Studios Ltd. (Alberta, Canada) is the owner of the products and the data controller. Updated hosting provider to Rocket.net, confirmed analytics as Fathom Analytics, and updated email marketing to FluentCRM.
December 2024 – Updated entity references and payment processing relationship.
June 29, 2023 – Removed Google Analytics
May 21, 2018 – Updated language of the policy to be more user-friendly, specifically outlining requirements in preparation for meeting the GDPR.