Privacy Policy

Last updated: 7 August 2026  ·  Built by Baldiv OÜ

This Privacy Policy explains how Baldiv OÜ ("we", "us", "our") collects, uses, and protects information when you visit pulseviews.net (the "Site") or use the PulseViews WordPress plugin (the "Plugin").

1. Who we are

PulseViews is a product of Baldiv OÜ, a company registered in Estonia. You can reach us at the contact form on our About page or through baldiv.com.

2. Information we collect on this website

When you visit pulseviews.net we may collect:

• Usage data — pages visited, referrer URL, browser type, approximate location (country level), and time of visit. This is collected via standard server logs and is not linked to any personally identifiable information.
• Contact form submissions — name, email address, and message content when you contact us voluntarily.
• Purchase information — when you buy PulseViews Pro, your payment is processed by Stripe. We receive confirmation of payment and your email address. We never see or store your card details.

We do not use Google Analytics, Facebook Pixel, or any third-party tracking scripts on this website.

3. How the PulseViews plugin handles data on your WordPress site

The PulseViews plugin runs entirely on your WordPress server. The following data is stored in your own database:

• View events — a SHA-256 hash of the visitor's IP address (not the raw IP), a session key, user-agent string, post ID, referrer URL, and timestamp.
• Country code — only if you enable Geographic Tracking in Settings → Other. Disabled by default.

Raw IP addresses are never stored in plain text. All IP data is hashed using a one-way SHA-256 function before being written to the database.

No data collected by the plugin is ever sent to Baldiv OÜ, pulseviews.net, or any third party — unless you explicitly enable geographic tracking (see Section 4).

4. External services used by the plugin

The plugin connects to one optional external service:

ip-api.com — IP Geolocation (opt-in, disabled by default)

• Purpose: to resolve the approximate country of a visitor's IP address for geographic analytics.
• When it is called: only when a page view is recorded AND "Geographic tracking" is explicitly enabled in the plugin settings.
• What is sent: the visitor's IP address only. No personal identifiers, no site URL, no cookies.
• Caching: results are cached in your WordPress database for 24 hours per IP. The same IP is never sent twice within that window.
• Cloudflare alternative: if your site is proxied through Cloudflare, the country is read from the CF-IPCountry header — ip-api.com is never contacted.
• ip-api.com Terms of Service: ip-api.com/docs/legal

5. Cookies

This website (pulseviews.net) does not set any tracking or analytics cookies.

The PulseViews plugin does not set cookies on your WordPress site. Session deduplication is handled via a hashed key stored in the visitor's browser using sessionStorage, which is automatically cleared when the browser tab is closed and is never sent to any server.

6. Payment processing

Pro purchases are processed by Stripe, Inc., a PCI-DSS-compliant payment processor. When you complete a purchase:

• Your card details are entered directly into Stripe's secure fields and never transmitted to our servers.
• We receive your email address and payment confirmation from Stripe to deliver your download.
• Stripe's Privacy Policy applies to information you provide during checkout: stripe.com/privacy.

7. How we use your information

• To deliver your Pro plugin download and send purchase receipts.
• To respond to support and contact form enquiries.
• To understand how the website is used and improve it (via server logs only — no third-party analytics).

We do not sell, rent, or share your personal information with any third party for marketing purposes.

8. Data retention

• Purchase records — retained for 7 years for tax and accounting purposes.
• Contact form messages — retained until resolved, then deleted.
• Plugin data on your site — controlled entirely by you. You can configure automatic pruning in Settings → Other → Raw data retention, or delete all data via Settings → Other → Danger Zone before uninstalling.

9. Your rights (GDPR)

If you are located in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR), including the right to access, correct, or delete personal data we hold about you. To exercise any of these rights, contact us via the contact form.

10. Children's privacy

Our services are not directed at children under 16. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the Site or Plugin after changes constitutes your acceptance of the updated policy.

12. Contact

Questions about this Privacy Policy? Contact us at pulseviews.net/about or through baldiv.com.