Privacy Policy

SOLID BACKUPS: What personal data we collect and why we collect it

Backups
Per the functionality of this plugin, backups of your website files and/or database are created and stored locally on your server and/or remotely on 3rd party servers based on the settings of this plugin. Archives can include, but are not limited to, file and database assets, including hashed passwords, 3rd party data, uploads and user information. These backups are stored to provide critical functionality of this plugin.

Cookies
Cookies are used to handle importing and restoring backups.

Plugin Settings
Some plugin settings ask for an email address or login credentials to 3rd party services. This is stored to provide functional features to the plugin.

Recent Activity
This plugin tracks dates, times and actions of successful and unsuccessful backups and remote data transfers. This is stored to help make the plugin better and assist with troubleshooting problems.

Logging
This plugin logs some personal information such as email addresses, usernames, database and server information. This is stored to help make the plugin better and assist with troubleshooting problems.

How long we retain your data
Backups
Backup retention is completely up to the website owner. This can vary from less than one minute to indefinitely.

Cookies
Cookies used during the restore/import process expire after 24 hours.

Plugin Settings
Settings are retained indefinitely until they are changed or removed manually.

Where we send your data
Backups
Backups are not automatically sent to remote destinations automatically, however backups can be configured to be sent to third-party servers.

How we protect your data
Backups
Backup zip files are stored with hashed file names to prevent filename guessing and directory browsing is disabled.

What third parties we receive data from
Backup Destinations
Backups can be sent to third-party destination servers, including but not limited to:
Solid Backups Stash | Privacy Policy
Solid Backups Deployment | Privacy Policy
Links to third party privacy policies have been included.

SOLID CENTRAL: Where we send your data
This web site uses a third party service to manage administrative tasks. If you leave a comment, submit personal information via a contact form, or otherwise exchange personal details with us, it is possible that we may use this service to manage that data. Please visit the SolidWP Privacy Policy for more information regarding the way they handle their data.

SOLID SECURITY: What personal data we collect and why we collect it
Cookies
Magic links create a temporary cookie named “itsec-ml-lockout-bypass” that enables users to log in through a link sent to their email. This cookie references session data containing the user’s ID and IP address. It automatically expires after 30 minutes.
A cookie named “itsec_interstitial_browser” is created to track a user’s login process to implement enhanced security features.
Some users can enable the “Remember This Device” feature to skip Two-Factor when using the same device. This generates a cookie named “itsec_remember_2fa”. It contains no personal data and expires after 30 days.

Security Logs
The IP address of visitors, user ID of logged in users, and username of login attempts are conditionally logged to check for malicious activity and to protect the site from specific kinds of attacks. Examples of conditions when logging occurs include login attempts, log out requests, requests for suspicious URLs, changes to site content, and password updates. This information is retained for 60 days.

Who we share your data with
A QR code image is generated for users that set up two-factor authentication for this site. This image is generated using a SolidWP-hosted API. In the process of generating this image, your username is sent to the API. This data is not logged. For privacy policy details, please see the SolidWP Privacy Policy.

This site is scanned for potential malware and vulnerabilities by the SolidWP Site Scanner. We do not send personal information to the scanner; however, the scanner could find personal information posted publicly (such as in comments) during the scan.

How long we retain your data
Security logs are retained for 60 days.