Privacy Settings
The Privacy tab provides configuration options to manage user data handling, checkout compliance, temporary storage, and cache management. These settings help you align your download manager with privacy regulations and optimize site performance.
Quick Reference Summary
| Section | Key Options | Purpose |
|---|---|---|
| Privacy Settings | IP storage, download history deletion | Controls personal data collection and retention |
| Checkout Settings | Privacy policy agreement, label text | Enforces user consent at checkout |
| Temporary Storage | Database vs. File | Determines where temporary plugin data is stored |
| Cache & Stats | Clear cache, delete stats, auto-clean, cron | Manages cached data and statistics cleanup |
Privacy Settings
This section controls how visitor data is collected and retained on your site.
| Setting | Default | Description |
|---|---|---|
| Do not store visitor’s IP | Disabled | When enabled, the plugin will not record or store the IP addresses of visitors. Enable this option if you want to limit the personal data collected from your users. |
| Delete download history when users close accounts | Disabled | When enabled, any download history associated with a user account will be permanently deleted when that account is closed or deleted. Useful for GDPR compliance and ensuring user data is fully removed upon account termination. |
Notes:
- Enabling Do not store visitor’s IP may limit your ability to track download statistics or detect abuse.
- Deleting download history on account closure is irreversible. Ensure this aligns with your data retention policy before enabling.
Checkout Settings
This section controls the privacy policy agreement requirement during the checkout process.
| Setting | Default | Description |
|---|---|---|
| Must agree with privacy policy before checkout | Enabled | When enabled, users are required to check a consent box and agree to the privacy policy before completing any purchase. This ensures informed consent prior to transactions. |
| Privacy policy label | I agree with the terms | The text displayed next to the consent checkbox on the checkout page. Customize this to match your site’s wording or legal requirements. |
To change the label text:
- Navigate to Downloads › Settings › Privacy.
- Locate the Privacy policy label field under Checkout Settings.
- Enter your desired label text (e.g., “I have read and agree to the Privacy Policy”).
- Click Save Settings to apply the change.
Tip: It is recommended to hyperlink your Privacy Policy page within this label.
Temporary Storage Management
This section determines where temporary data generated by the plugin is stored during processing.
| Option | Default | Description |
|---|---|---|
| Store in Database | Selected | Temporary data is stored in the WordPress database. Recommended for most hosting environments, ensures broad compatibility. |
| Save in File | Not selected | Temporary data is stored in the file system. May be preferable in high-traffic environments where database write load is a concern. |
When to use each option:
| Option | Best For |
|---|---|
| Store in Database | Most users on shared, VPS, or managed WordPress hosting. |
| Save in File | Sites with high traffic or hosts that restrict frequent database writes. |
Cache & Stats
This section provides tools to manage cached data and usage statistics, and to configure automatic cleanup behavior.
Manual Actions
| Action | Description |
|---|---|
| Clear All Cache | Clears all cached files and data stored by the plugin. Use this if you notice outdated download links, stale file listings, or after making significant changes to your settings. |
| Delete All Stats Data | Permanently removes all download statistics data. This action cannot be undone. Use only if you want to fully reset your analytics. |
Auto Clean Cache & Temporary Storage
| Setting | Default | Description |
|---|---|---|
| Auto clean cache dir & temporary storage everyday | Disabled | When enabled, the plugin automatically clears the cache directory and temporary storage once per day using WordPress Cron (WP-Cron). |
Note: This option relies on WP-Cron, which is triggered by site visits. If your site has low traffic, WP-Cron may not run reliably. In that case, disable this toggle and configure a server-level cron job using the Cron URL below.
Cron Key & Cron URL
| Field | Description |
|---|---|
| Cron Key | A unique security key generated by the plugin, embedded in the Cron URL to authenticate requests. Do not share this key publicly. |
| Cron URL | The full URL used to trigger cache cleanup externally. Use this to configure a server-level cron job from your hosting control panel. |
Setting up a server-level cron job:
- Copy the URL displayed in the Cron URL field.
- Log in to your hosting control panel (cPanel, Plesk, etc.).
- Navigate to the Cron Jobs section.
- Create a new cron job with a daily schedule.
- Set the command to fetch the Cron URL, for example:
curl -s "YOUR_CRON_URL_HERE" > /dev/null 2>&1 - Save the cron job.
Tip: If you configure a server-level cron job, there is no need to enable the auto-clean toggle in the plugin settings.
Data Collection
Download Tracking Data
| Data Type | Description | Default |
|---|---|---|
| IP Address | User’s IP address | Collected |
| User Agent | Browser information | Collected |
| Timestamp | Download time | Collected |
| User ID | WordPress user ID | Collected |
| Referrer | Source page | Collected |
| Location | Geographic data (from IP) | Disabled |
User Profile Data
| Data Type | Description | Default |
|---|---|---|
| Email Address | User email | Required |
| Display Name | Public name | Required |
| Download History | Past downloads | Stored |
| Purchase History | Order data | Stored (Premium) |
| IP History | All IPs used | Disabled |
Cookies
| Cookie | Purpose | Duration |
|---|---|---|
| wpdm_session | Session tracking | Session |
| wpdm_lock_bypass | Remember lock unlock | 30 days |
| wpdm_cart | Shopping cart data | 7 days |
| wpdm_consent | Consent status | 1 year |
Data Retention
Retention Periods
| Data Type | Default | Configurable |
|---|---|---|
| Download Stats | Forever | Yes |
| User Sessions | 30 days | Yes |
| Email Subscribers | Forever | Yes |
| Order History | 7 years | Yes |
| Access Logs | 90 days | Yes |
| Error Logs | 30 days | Yes |
Auto Cleanup
| Setting | Description | Default |
|---|---|---|
| Enable Cleanup | Automatically delete old data | Disabled |
| Cleanup Schedule | How often to run | Weekly |
| Notify Before | Days before deletion warning | 7 |
| Grace Period | Days after notice to act | 30 |
User Rights
Data Export
Users can export their data via:
- User Dashboard: Self service export
- WordPress Tools: Tools > Export Personal Data
- Admin Request: Admin initiated export
Data Deletion
Users can request data deletion:
- User Dashboard: Self service deletion
- WordPress Tools: Tools > Erase Personal Data
- Email Request: Manual processing
| Data | Deletion Behavior |
|---|---|
| User Account | Anonymized or deleted |
| Downloads | Stats anonymized |
| Orders | Anonymized (legal retention) |
| Comments | Assigned to “Anonymous” |
| Files | Access revoked |
Right to Rectification
Users can update their data:
| Data | Update Method |
|---|---|
| Profile | Edit Profile page |
| Change email with verification | |
| Name | Edit Display Name |
| Password | Change Password form |
Tips
- Enable IP anonymization for maximum privacy
- Set reasonable retention periods
- Test data export functionality
- Keep consent logs for compliance
- Update privacy policy when settings change
- Review third-party integrations