Settings Reference

Privacy Settings

6 min read Updated Apr 12, 2026

The Privacy tab provides configuration options to manage user data handling, checkout compliance, temporary storage, and cache management. These settings help you align your download manager with privacy regulations and optimize site performance.

Quick Reference Summary

Section Key Options Purpose
Privacy Settings IP storage, download history deletion Controls personal data collection and retention
Checkout Settings Privacy policy agreement, label text Enforces user consent at checkout
Temporary Storage Database vs. File Determines where temporary plugin data is stored
Cache & Stats Clear cache, delete stats, auto-clean, cron Manages cached data and statistics cleanup

Privacy Settings

This section controls how visitor data is collected and retained on your site.

Setting Default Description
Do not store visitor’s IP Disabled When enabled, the plugin will not record or store the IP addresses of visitors. Enable this option if you want to limit the personal data collected from your users.
Delete download history when users close accounts Disabled When enabled, any download history associated with a user account will be permanently deleted when that account is closed or deleted. Useful for GDPR compliance and ensuring user data is fully removed upon account termination.

Notes:

  • Enabling Do not store visitor’s IP may limit your ability to track download statistics or detect abuse.
  • Deleting download history on account closure is irreversible. Ensure this aligns with your data retention policy before enabling.

Checkout Settings

This section controls the privacy policy agreement requirement during the checkout process.

Setting Default Description
Must agree with privacy policy before checkout Enabled When enabled, users are required to check a consent box and agree to the privacy policy before completing any purchase. This ensures informed consent prior to transactions.
Privacy policy label I agree with the terms The text displayed next to the consent checkbox on the checkout page. Customize this to match your site’s wording or legal requirements.

To change the label text:

  1. Navigate to Downloads › Settings › Privacy.
  2. Locate the Privacy policy label field under Checkout Settings.
  3. Enter your desired label text (e.g., “I have read and agree to the Privacy Policy”).
  4. Click Save Settings to apply the change.

Tip: It is recommended to hyperlink your Privacy Policy page within this label.

Temporary Storage Management

This section determines where temporary data generated by the plugin is stored during processing.

Option Default Description
Store in Database Selected Temporary data is stored in the WordPress database. Recommended for most hosting environments, ensures broad compatibility.
Save in File Not selected Temporary data is stored in the file system. May be preferable in high-traffic environments where database write load is a concern.

When to use each option:

Option Best For
Store in Database Most users on shared, VPS, or managed WordPress hosting.
Save in File Sites with high traffic or hosts that restrict frequent database writes.

Cache & Stats

This section provides tools to manage cached data and usage statistics, and to configure automatic cleanup behavior.

Manual Actions

Action Description
Clear All Cache Clears all cached files and data stored by the plugin. Use this if you notice outdated download links, stale file listings, or after making significant changes to your settings.
Delete All Stats Data Permanently removes all download statistics data. This action cannot be undone. Use only if you want to fully reset your analytics.

Auto Clean Cache & Temporary Storage

Setting Default Description
Auto clean cache dir & temporary storage everyday Disabled When enabled, the plugin automatically clears the cache directory and temporary storage once per day using WordPress Cron (WP-Cron).

Note: This option relies on WP-Cron, which is triggered by site visits. If your site has low traffic, WP-Cron may not run reliably. In that case, disable this toggle and configure a server-level cron job using the Cron URL below.

Cron Key & Cron URL

Field Description
Cron Key A unique security key generated by the plugin, embedded in the Cron URL to authenticate requests. Do not share this key publicly.
Cron URL The full URL used to trigger cache cleanup externally. Use this to configure a server-level cron job from your hosting control panel.

Setting up a server-level cron job:

  1. Copy the URL displayed in the Cron URL field.
  2. Log in to your hosting control panel (cPanel, Plesk, etc.).
  3. Navigate to the Cron Jobs section.
  4. Create a new cron job with a daily schedule.
  5. Set the command to fetch the Cron URL, for example: curl -s "YOUR_CRON_URL_HERE" > /dev/null 2>&1
  6. Save the cron job.

Tip: If you configure a server-level cron job, there is no need to enable the auto-clean toggle in the plugin settings.

Data Collection

Download Tracking Data

Data Type Description Default
IP Address User’s IP address Collected
User Agent Browser information Collected
Timestamp Download time Collected
User ID WordPress user ID Collected
Referrer Source page Collected
Location Geographic data (from IP) Disabled

User Profile Data

Data Type Description Default
Email Address User email Required
Display Name Public name Required
Download History Past downloads Stored
Purchase History Order data Stored (Premium)
IP History All IPs used Disabled

Cookies

Cookie Purpose Duration
wpdm_session Session tracking Session
wpdm_lock_bypass Remember lock unlock 30 days
wpdm_cart Shopping cart data 7 days
wpdm_consent Consent status 1 year

Data Retention

Retention Periods

Data Type Default Configurable
Download Stats Forever Yes
User Sessions 30 days Yes
Email Subscribers Forever Yes
Order History 7 years Yes
Access Logs 90 days Yes
Error Logs 30 days Yes

Auto Cleanup

Setting Description Default
Enable Cleanup Automatically delete old data Disabled
Cleanup Schedule How often to run Weekly
Notify Before Days before deletion warning 7
Grace Period Days after notice to act 30

User Rights

Data Export

Users can export their data via:

  • User Dashboard: Self service export
  • WordPress Tools: Tools > Export Personal Data
  • Admin Request: Admin initiated export

Data Deletion

Users can request data deletion:

  • User Dashboard: Self service deletion
  • WordPress Tools: Tools > Erase Personal Data
  • Email Request: Manual processing
Data Deletion Behavior
User Account Anonymized or deleted
Downloads Stats anonymized
Orders Anonymized (legal retention)
Comments Assigned to “Anonymous”
Files Access revoked

Right to Rectification

Users can update their data:

Data Update Method
Profile Edit Profile page
Email Change email with verification
Name Edit Display Name
Password Change Password form

Tips

  • Enable IP anonymization for maximum privacy
  • Set reasonable retention periods
  • Test data export functionality
  • Keep consent logs for compliance
  • Update privacy policy when settings change
  • Review third-party integrations

Related Documentation