Privacy Policy
Last updated: 30 June 2026
This Privacy Policy explains what personal data FotoGrids collects, why we collect it, the legal basis for processing it, who we share it with, how long we keep it, and the rights you have over it. It applies to our website at www.fotogrids.com and to the FotoGrids and FotoGrids Pro WordPress plugins.
FotoGrids is a self-hosted WordPress gallery plugin. It runs on your own WordPress website. We do not host your site or store the images in your galleries, which keeps the amount of personal data we are exposed to deliberately small. This policy is written to be clear about exactly what we do and do not collect.
1. Who we are and the scope of this policy
In this policy, “FotoGrids“, “we“, “us“, and “our” refer to the FotoGrids gallery plugin and website, operated by Mark Rean (Israel) as an individual – FotoGrids is not currently incorporated as a company. Mark Rean is the data controller responsible for the personal data described here.
- General contact: hello@fotogrids.com
- Privacy contact: privacy@fotogrids.com
- Postal address: available on request
This policy covers three distinct areas, which we keep separate throughout because the data, and who controls it, differs in each:
- Our website – visiting www.fotogrids.com, reading our documentation and blog, contacting us, subscribing to our newsletter, or creating an account.
- The plugin’s usage statistics – optional, opt-in usage data sent from the FotoGrids plugin running on your site. This is off by default and collects nothing unless you actively turn it on.
- Purchases of FotoGrids Pro – billing, payment, and licensing data, which is collected and controlled by Freemius as our Merchant of Record (see Section 5).
This policy does not cover how you, as a site owner, handle the personal data of your own website’s visitors. When FotoGrids runs on your site, you remain the controller of your visitors’ data. See our GDPR statement for how roles are allocated.
2. The data we collect
(a) Website visitors
When you use www.fotogrids.com, we may collect:
- Account data – if you create an account: your name, email address, and account credentials.
- Contact and support data – your name, email address, the website URL you are asking about, and the contents of any message when you contact us or open a support request.
- Usage and device data – IP address, browser type and version, operating system, referring pages, and pages viewed on our site, collected through analytics and server logs.
- Cookie and tracking data – see Section 4 and our Cookie Policy.
We use Google Analytics to understand how our website is used. The categories and durations of cookies are listed in our Cookie Policy.
(b) Plugin usage statistics (opt-in, off by default)
The FotoGrids plugin can send us anonymous and technical usage data to help us fix bugs and decide what to build. This is opt-in and disabled by default – nothing is collected from the plugin unless you actively choose to enable it. We present the opt-in as a toggle in the FotoGrids setup wizard when you activate the plugin, and again in the plugin’s settings, where you can turn it on or off at any time.
When enabled, the data we collect is limited to:
- Basic profile info – your WordPress user’s first and last name and email address.
- Basic website info – your homepage URL and title, WordPress and PHP versions, and site language.
- Basic plugin info – your current FotoGrids and SDK versions, and whether they are active or being uninstalled.
- Other plugins and themes – the names, slugs, versions, and active status of your other plugins and themes, which helps us catch conflicts early.
None of this data is sold, and we never collect your image content, image URLs, or your visitors’ data. You can decline at activation and revoke it later from FotoGrids → Settings → Advanced in your WordPress dashboard. Declining has no effect on how the plugin works.
Separately, you can opt in to receive occasional product emails from us. This marketing opt-in is optional, off by default, and independent of the usage statistics — you will only receive emails if you turn it on, and you can unsubscribe at any time. These emails are delivered through Freemius (see Section 5).
A note on EXIF data. The FotoGrids Pro EXIF and map feature reads the EXIF metadata embedded in your images. This processing happens entirely on your own WordPress server. We do not receive, transmit, or store the EXIF data of your photos or your visitors’ photos.
(c) Customers who purchase FotoGrids Pro (collected by Freemius)
We sell FotoGrids Pro through Freemius, which acts as our Merchant of Record. When you buy a license, the following data is collected and controlled by Freemius, not by us: your name, email address, billing address, payment details, and license, activation, subscription, and renewal records.
Card and payment details are handled entirely by Freemius and its payment processors. Payment card data never reaches our servers. Freemius’s handling of this data is governed by its own privacy policy: freemius.com/privacy. We receive from Freemius only the limited account and license information we need to provide updates, support, and license validation – for example your name, email address, and license status.
3. How we use data and our legal basis
What we do
Why
Legal basis
What we do
Provide and validate Pro licenses, deliver updates and support
Why
To perform our agreement with you
Legal basis
Contract (Art. 6(1)(b))
What we do
Respond to support requests and enquiries
Why
To answer and assist you
Legal basis
Contract / legitimate interests (Art. 6(1)(b)/(f))
What we do
Collect plugin usage statistics
Why
To improve the plugin
Legal basis
Consent (Art. 6(1)(a)) – opt-in only
What we do
Send optional product / marketing emails (only if you opt in)
Why
To keep you informed
Legal basis
Consent (Art. 6(1)(a))
What we do
Operate website analytics and non-essential cookies
Why
To understand and improve our site
Legal basis
Consent (Art. 6(1)(a))
What we do
Secure our website, prevent fraud and abuse, keep server logs
Why
To protect our service and users
Legal basis
Legitimate interests
(Art. 6(1)(f))
What we do
Keep transaction and tax records
Why
To meet accounting and tax duties
Legal basis
Legal obligation
(Art. 6(1)(c))
We do not sell your personal data, and we do not use plugin usage statistics for advertising.
4. Cookies and tracking
Our website uses strictly necessary, functional, analytics, marketing, and affiliate cookies. Non-essential cookies are only set after you consent through our cookie banner, and you can change or withdraw your choice at any time.
The full list of cookies – name, provider, purpose, and duration – and instructions for managing them are in our Cookie Policy. Our consent banner is managed by Complianz.
5. Sharing and third parties (sub-processors)
We share personal data only with the service providers we need to run our business, and only as far as each one requires. We do not sell or rent personal data. Our sub-processors include:
Sub-processor
Sub-processor
Freemius
Merchant of Record – payments, tax/VAT, invoicing, licensing, affiliate payouts, and optional product/marketing emails
Sub-processor
Google Analytics (Google)
Role
Privacy policy
Sub-processor
Elementor Hosting
(powered by Google Cloud Platform)
Role
Privacy policy
Because Freemius is our Merchant of Record, your purchase is legally a transaction between you and Freemius on our behalf. Freemius issues your invoice, collects and remits any sales tax or VAT, processes your payment, and handles refunds and chargebacks. Its buyer terms and privacy policy apply to your purchase in addition to ours. We do not restate Freemius’s practices here – please read freemius.com/privacy.
We may also disclose personal data where required by law, to enforce our agreements, to prevent fraud or harm, or in connection with a merger, acquisition, or sale of assets (in which case we will notify you).
6. International data transfers
We and our sub-processors may process personal data in countries outside your own, including outside the European Economic Area and the United Kingdom. Where we transfer personal data across borders, we rely on appropriate safeguards – such as the European Commission’s Standard Contractual Clauses, the UK Addendum, or transfers to countries the European Commission has found to provide an adequate level of protection. You can ask us for details of the safeguards that apply using the contact details in Section 13.
7. Data retention
We keep personal data only for as long as we need it for the purposes set out in this policy:
- Account and license data – for as long as your account or license is active, and for a reasonable period afterwards for support and renewal.
- Support correspondence – for as long as needed to resolve your request and for a reasonable period afterwards.
- Newsletter data – until you unsubscribe.
- Plugin usage statistics – retained only while relevant for product analysis; you can withdraw consent at any time.
- Transaction and tax records – kept by Freemius and, where we hold copies, for the period required by applicable accounting and tax law.
- Website analytics and server logs – for the limited period set out in our Cookie Policy and logging configuration.
When data is no longer required for the purposes it was collected for, we securely delete or irreversibly anonymise it, unless we are required to keep it longer to comply with a legal or tax obligation, resolve a dispute, or enforce our agreements.
8. Your rights
Subject to applicable law, you have the right to:
- access the personal data we hold about you;
- rectify data that is inaccurate or incomplete;
- erase your data (“right to be forgotten”);
- restrict or object to our processing;
- data portability – receive your data in a structured, commonly used, machine-readable format;
- withdraw consent at any time, where we rely on consent (for example, the plugin usage statistics or our newsletter), without affecting processing carried out before withdrawal.
To exercise any of these rights, contact us at privacy@fotogrids.com. We will respond within the time limits set by applicable law. For billing and payment data held by Freemius as Merchant of Record, you may also contact Freemius directly.
9. California and other US state privacy rights
If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect and how we use and disclose it, the right to access and delete it, the right to correct it, and the right not to be discriminated against for exercising these rights.
We do not sell your personal information, and we do not “share” it for cross-context behavioural advertising as those terms are defined under California law. To exercise your rights, contact us at privacy@fotogrids.com. Residents of other US states with comparable privacy laws may have similar rights, which we honour where they apply.
10. Children's privacy
FotoGrids is not directed to children. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Security
We use appropriate technical and organisational measures to protect personal data against loss, misuse, and unauthorised access, including encryption in transit, access controls, and reliance on reputable sub-processors. No method of transmission or storage is completely secure, so while we work to protect your data, we cannot guarantee absolute security.
12. Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you by email or a notice on our website. Your continued use of our website and plugins after a change takes effect means you accept the updated policy.
13. Contact and complaints
For any question about this policy or about your personal data, or to exercise your rights, contact:
- Privacy contact: privacy@fotogrids.com
- General enquiries: hello@fotogrids.com
- Postal address: available on request
If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection supervisory authority. We would, however, appreciate the chance to address your concerns before you do, so please consider contacting us first.
Purchases of FotoGrids Pro are processed by Freemius as Merchant of Record. Freemius’s privacy policy and terms apply to your purchase in addition to this policy.