NTCR/NetCred token integration — request to disable, data disclosure

Viewing 4 posts - 1 through 4 (of 4 total)
#209024

WMD
Participant

Hello WPDM Team,

I recently renewed my WPDM license (version 6.8) and was alerted to this new system and that I was “awarded tokens” (NTCR / NetCred) as part of the plugin’s reward mechanism. I have serious concerns about this integration, particularly around the possibility that my information or my clients’ information is being shared with a third‑party (e.g. netcred.io) without explicit consent.

To clarify and protect my operation and client trust, I kindly request the following:

1. A full description of exactly which data fields (domain names, license keys, email addresses, client info, usage statistics, etc.) are being transmitted by the token module, and to which external domain(s).

2. The endpoint URLs / servers to which data is forwarded (if any).

3. Whether there is an opt-out or disable switch that I, or you via configuration, can use to prevent any such data sharing, requests, or token hooks from executing.

4. If you can provide a version or mode of the plugin that omits or disables the token integration entirely (i.e. “token‑free mode”) so that no references to NTCR/NetCred appear anywhere within the WPDM system that our clients can see.

5. Assurance in writing that no client or site user data will be disclosed to any third parties beyond what is necessary for legitimate plugin operation (e.g. license verification).

If these cannot be satisfied, I must treat the token integration as a security and privacy liability and will consider migrating to a plugin that does not incorporate crypto/reward systems.

Thank you for your prompt response and clarity on this matter.

Regards,

</k>

#209025

Tahasin
Moderator

Hello,

Thank you for reaching out and sharing your concerns.

We completely understand and appreciate your attention to privacy and data security. Our team is currently reviewing your questions in detail, and we’ll get back to you shortly.

We truly appreciate your patience.
Best regards

#209026

Shahjada
Keymaster

Thank you for reaching out and for your continued support of WPDM. I completely understand your concerns, and I’m happy to clarify how this works.

First and foremost, no data from WPDM or your site (including domains, license keys, email addresses, or any client information) is ever shared with any third party — including NetCred (netcred.io) — unless you explicitly choose to sign up or connect your account with NetCred.

The NTCR token system is not integrated into the WPDM plugin itself. It’s a separate customer reward initiative developed by our parent company, W3 Eden, Inc., to thank users for their continued loyalty and renewals. When you renew your WPDM license, you’re eligible to claim NTCR tokens, but no information is transmitted or shared automatically.

If you prefer not to participate or receive these rewards, no action is required — you can simply ignore the NetCred invitation. In that case, no connection is made, no API calls are triggered, and no data is shared in any way.

To summarize:
1. No data (domain, license, email, etc.) is sent to NetCred unless you manually register or connect your WPDM account to it.
2. There are no automatic external requests or token hooks within WPDM that share your or your clients’ information.
3. Opt-out: You’re already opted out by default. Unless you sign up on NetCred.io, the system remains inactive.
4. The WPDM plugin itself is fully operational without any dependency on the token system.

We take data privacy and user trust extremely seriously. The reward system is optional and completely separate from core plugin functionality.

#209027

WMD
Participant

Hi Shahjada,

Thank you for the speed, detailed and reassuring response! I genuinely appreciate the clarity — especially the confirmation that no data is transmitted without explicit opt-in and that the NTCR system is entirely separate from the core WPDM plugin.

That said, I want to be candid about my experience. The unexpected message that I had “🎉 just earned 13,955 NTCR tokens!” (without any prior context or opt-in) set off multiple alarm bells (the 🎉, large number and “NTCR tokens” in the subject line to start). In my environment, where I manage sensitive client sites and prioritize clarity, professionalism, and trust, the sudden appearance of what looked like a crypto incentive felt extremely out of place and risky. Specifically:

1. The token announcement was confusingly worded and lacked context, making it appear as though I had been enrolled in something I had not agreed to.

2. Any visible references to “NetCred” or tokens in the WordPress admin area could easily alarm clients, some of whom are understandably cautious about cryptocurrency associations.

3. While it is great to know the system is opt-in by design, I do not want clients to see any promotional messages or anything related to crypto or references arcane services such as “NetCred” or “NTCR”.

I understand the goal behind offering rewards and incentives, but I would strongly encourage your team to consider:

• Statements such as this from the email: “BTW, WordPress Download Manager is now integrated with NTCR — a multi-utility Web3 token designed to reward meaningful actions like purchases, referrals, and content engagement. NTCR puts real value behind your interactions.”

This is confusing and makes me think that the actual plugin WPDM is integrated with NTCR — something I never agreed to, never expected, do not see the value in it for myself nor my clients and, most importantly, do not want.

“a multi-utility Web3 token designed to reward meaningful actions like purchases, referrals, and content engagement.”

This is a long string of marketing BS that immediately sends up flags.

“NTCR puts real value behind your interactions.”

How? And why? You don’t explain it. And the website does an even worse job of trying to explain it.

• Adding a toggle or setting (or even a filter hook) to suppress any/all NTCR-related UI elements for users who do not opt in (if you implement anything in the WPDM UI)

• Ensuring that any promotional messages related to third-party programs are opt-in only and not shown by default after purchase or renewal.

• Re-evaluating how these types of programs are presented within paid software, especially where agency or enterprise use is involved. This is NOT what one would expect from paid software.

Thank you again for your attention to this. I have been a long-time WPDM user and appreciate the continued development — I just hope that future incentives are introduced with more nuance and control for users like me.

Best,

</k>

Viewing 4 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic.