Privacy
Assignment happens in the visitor's browser, results live in your database, and the free plugin never calls improveab.com. Here is exactly what is stored, and what never is.
Test id, variant key, event type (impression or conversion), the visitor id, device class (desktop, mobile or tablet, derived in the browser), revenue value for the purchase goal, the page path for conversions, and a UTC timestamp. A unique index on test, visitor and event counts each visitor once.
IP address, user agent, referrer, user account. The IP is used only as a hashed key for a per-minute rate limit (600 events a minute per address, using the visitor's real address behind Cloudflare) and is never stored itself; the per-minute counts are deleted by the nightly clean-up at the latest, and when the plugin is deactivated. Known crawlers are dropped by user-agent pattern before anything is written.
A random id generated in the browser and kept in localStorage. It travels with each impression or conversion to your own server, where it de-duplicates the counts. One id per browser for every test on the site, with no expiry until the visitor clears site data. No cookies anywhere. For a URL test across two sites it travels in the redirect URL to the other site, where it is kept in that site's local storage so conversions there can be credited back to the test.
Once a test is stopped, its raw rows older than the retention window (90 days by default, settable from 1 to 3,650) are rolled up into daily totals per variant and deleted, so the device breakdown and page paths of finished tests age out while totals stay. Running tests keep every raw row, so a late conversion is never lost.
The plugin stores no names, email addresses, IP addresses or account ids - only the random per-browser id it generates itself. Whether local storage for testing needs consent under ePrivacy is a legal call for the site owner; we do not make that call for you.
Optional, Pro and admin-side only. Copy ideas send the selected text, your direction if you typed one, the page URL, title, description and tag name; a Copy rewrite of every field sends only the list of texts, never the markup. Style sends the selected field's markup, its current variant CSS, the instruction, the page title and a digest of computed styles from the live page (colours, fonts, spacing, shadows and background images, plus the theme's root CSS variables). Calls go from your server straight to the provider you configured with your own key. Nothing touches improveab.com. No AI usage is logged, the key stays in your WordPress options readable only by administrators, and Style cannot add JavaScript to your page.
Activating your licence sends your licence key and your site's root domain to Dodo Payments' licence API; the daily re-check and deactivation send the key and the activation id. Once the Pro update server is live, update checks go to it and a successful answer is cached for six hours, retried every 30 minutes while it is unreachable. Each check sends the plugin slug and the installed Pro version, your licence key, activation id, root domain, an anonymous site id and your PHP and WordPress versions. The free plugin never calls improveab.com.
By default your tests and results are kept; a clean-delete setting removes everything.
This page describes the plugin. The website itself (improveab.com) and the Pro checkout run by Dodo Payments have their own notices: the privacy policy and the terms.
Free, cookieless, no traffic limits, on any builder or theme.