SecureLite privacy — what we collect, and what we don't

In short

The plugin sends nothing about your site, your users or your visitors to us.
This website sets no cookies and uses no advertising or cross-site tracking.
If you join the waitlist or answer the survey, we keep what you typed on our own server.
We never sell or share your details, and we'll delete them whenever you ask.

The SecureLite plugin

The plugin runs entirely on your own website. Nothing about your site, your users, your visitors or your security events is sent to us. There's no account, no licence key and no tracking.

What it sends: During a malware scan, it asks WordPress.org for the official file checksums of your WordPress version, and of any WordPress.org plugin it needs to check. The request names only the WordPress version and language, or a plugin's folder name and version. That request goes to WordPress.org, not to us, and WordPress.org's own privacy policy applies.
What it keeps on your site: A list of security events, such as login attempts, account changes and blocked requests, with the visitor's internet address and browser name. It's stored in your own database, keeps only the most recent entries, and is removed if you delete the plugin.
Cookies on your site: Only for visitors who pass Smart protection's browser check: securelite_pass and securelite_passed (a signed pass that lasts a day) and briefly securelite_proof. They hold no personal information and aren't used for anything else.
Emails: Alerts and summaries are sent by your own site, through your own site's email, to the addresses you choose. They never pass through us.

Because all of this happens on your server, you're responsible for it as the site owner, the same as for any other plugin. You may want to mention the security log and cookies in your own site's privacy notice.

This website

Cookies: None. This website doesn't set cookies.
Visitor statistics: We count visits with Plausible Analytics, which uses no cookies and stores no personal information. It tells us things like how many people visited a page and which site sent them.
Fonts and scripts: Everything on this site, including the fonts, is served from our own server. Nothing is loaded from Google or advertising services. The only outside request is the Plausible visit counter described above.
Server logs: Our hosting company, Hostinger, keeps standard server logs, which include internet addresses, to keep the server secure. We don't use them for marketing.

The waitlist and the survey

These are the only places this website collects anything you type.

Cloud waitlist: Your email address, and if you choose to tell us, how many sites you look after and which describes you. We use it to email you once, when SecureLite Cloud opens.
Survey: Your answers, and your email address only if you leave it to arrange a call. Without an email, your answers are anonymous to us.
Where it's kept: In a file on our own server at Hostinger, outside the public website. A copy of each sign-up or answer is also emailed to our own mailbox so we see it.
Spam protection: To stop the same connection sending forms over and over, we keep a scrambled, one-way version of your internet address for up to one hour. It can't be turned back into your address and isn't stored with your answers.
How long: Waitlist addresses until 12 months after Cloud opens, or until you ask us to delete them. Survey email addresses for up to 12 months. Anonymous survey answers for as long as they help us decide what to build.
Who sees it: Only the people who build SecureLite at PixelGravitas. We never sell it, share it, or add you to other mailing lists.

Seeing, changing or deleting your details

Email hello@pixelgravitas.com from the address you gave us, and we'll show you what we hold, correct it, or delete it. Replying to any email we send works too. We'll do it within 30 days, usually much sooner.

SecureLite Cloud

Cloud isn't available yet. Before anyone can connect a site, we'll publish exactly what it sends and keeps, and the plugin will say so too. Connecting will always be your choice.

Who we are

SecureLite is made by PixelGravitas, Chennai, India. Questions about privacy go to hello@pixelgravitas.com.

Changes to this page

If we change how we handle your details, we'll update this page and the date at the top. If the change affects something you've already given us, we'll email you before it takes effect.

What we collect, and what we don't.