Privacy Policy

1. Data Controller

The website https://wpimpactmap.com/ and the Depenova Impact Map software are operated by Vass Gábor egyéni vállalkozó, a Hungarian sole proprietor trading under the WP Impact Map brand (the “Developer”, “we”, “us” or the “Controller”). WP Impact Map is the Developer’s trading brand, and Depenova Impact Map is the product name. Neither is a separate legal entity.

• Business name: Vass Gábor egyéni vállalkozó
• Registered office / correspondence address: 4121 Szentpéterszeg, Somogyi Béla utca 17., Hungary
• Tax number: 91730974-1-29
• Sole-proprietor registration number: 61800775
• Registering authority: Nemzeti Adó- és Vámhivatal (NAV)
• Email: hello@wpimpactmap.com
• Website: https://wpimpactmap.com/

No data protection officer has been appointed because, based on the current nature and scale of the processing, the Controller is not aware of circumstances requiring the appointment of a data protection officer under Article 37 GDPR.

2. Scope of this Policy

This Privacy Policy explains how we process personal data in connection with the wpimpactmap.com website, the Depenova Impact Map software, support communications, Pro licence administration, software updates and related commercial activities. It also distinguishes between data processed by us and technical data stored locally on a customer’s own WordPress installation.

Purchases of Depenova Impact Map Pro are processed through Lemon Squeezy, which acts as Merchant of Record for the checkout transaction. Lemon Squeezy processes payment and transaction information under its own terms and privacy policy. The Developer does not receive full payment-card details.

3. Website Hosting and Technical Logs

The website is hosted by:

When you access the website, the hosting environment may process technical information such as IP address, date and time of access, requested URL, browser and device information, referrer, server errors and security-related events.

Purpose: website delivery, security, troubleshooting, prevention of abuse and maintenance of system integrity.
Legal basis: Article 6(1)(f) GDPR (our legitimate interest in operating and securing the website) and, where applicable, Article 6(1)(c) GDPR (legal obligation).
Typical retention: ordinary server log data is retained for approximately 30 days unless a longer period is necessary for security investigation, legal compliance or dispute resolution. Hosting backups may follow a separate technical retention cycle.

4. Contact and Support

If you contact us by email, we may process your name, email address, message content, timestamps, order or licence information, and any screenshots, logs or diagnostic files that you voluntarily provide.

Purpose: answering enquiries, providing technical support, handling complaints, troubleshooting and documenting support history.
Legal basis: Article 6(1)(b) GDPR where processing is necessary to take steps at your request before a contract or to perform a contract; Article 6(1)(c) GDPR where a legal obligation applies; and Article 6(1)(f) GDPR for legitimate interests such as service quality, fraud prevention and the establishment, exercise or defence of legal claims.
Retention: support correspondence may be retained for up to 5 years after the matter is closed, unless a longer period is required by law or necessary for an ongoing dispute.

Our email service is provided through the Rackhost hosting environment.

5. Purchases, Subscriptions and Lemon Squeezy

Depenova Impact Map Pro is sold through Lemon Squeezy. Lemon Squeezy acts as Merchant of Record for the transaction and handles checkout, payment processing, applicable indirect taxes, receipts/invoices and subscription billing.

We may receive from Lemon Squeezy information necessary to fulfil and support your purchase, including your name, email address, country, order identifier, subscription identifier, product/variant, payment status, licence entitlement and limited billing-related information. We do not receive your complete payment-card number.

Purpose: delivering the purchased software entitlement, licence administration, customer support, fraud prevention and handling contractual issues.
Legal basis: Article 6(1)(b) GDPR (performance of contract), Article 6(1)(c) GDPR (legal obligations), and where appropriate Article 6(1)(f) GDPR (fraud prevention and legal claims).

Developer-held transaction and entitlement records are retained for as long as necessary to provide the subscription and support and to comply with applicable legal obligations. Accounting documents that are required to be retained by the Controller under Hungarian law may be kept for 8 years.

Lemon Squeezy processes its own transaction data under its own privacy documentation. You can review Lemon Squeezy’s privacy information at lemonsqueezy.com/privacy and its Buyer Terms at lemonsqueezy.com/buyer-terms.

6. Pro Licence Activation and Update Requests

To activate and maintain a Depenova Impact Map Pro licence, the Pro plugin communicates with the relevant licensing service. Licence-related requests may include a licence key, installation or instance identifier, website/domain information, product/variant information, plugin version, IP address and standard request metadata.

The plugin may also contact the Depenova Impact Map update service to determine whether the installation is entitled to receive a premium update.

Purpose: licence activation, licence validation, entitlement management, prevention of abuse and delivery of software updates.
Legal basis: Article 6(1)(b) GDPR and, where relevant for security and abuse prevention, Article 6(1)(f) GDPR.

We do not require access to the customer’s WordPress content database merely to validate a licence.

7. Data Processed Locally by the Plugin

7.1 Free edition

The Free edition performs dependency and impact analysis locally on the WordPress installation on which it is installed. It may inspect WordPress component registrations and relevant local content references, such as post IDs, content type/status, shortcode references and block references, in order to identify technical dependencies.

The Free edition does not, as part of its ordinary dependency scan, upload the customer’s full WordPress content database or dependency map to the Developer’s servers.

7.2 Pro edition

The Pro edition may provide additional local features such as runtime observation, before/after comparisons, baselines, technical evidence and component watchlists. Runtime observation is designed to be disabled by default until enabled by a site administrator.

When enabled, local runtime records may include technical events such as hook names, callback labels, component identifiers, relative source-file paths, timestamp, request type, URL path and HTTP method. These records are stored in the customer’s own WordPress database during ordinary operation.

The website owner or operator of the customer WordPress installation is responsible for deciding the appropriate legal basis, transparency information and retention periods for personal data processed within that website. Depenova Impact Map does not automatically make the Developer the controller of all personal data stored on a customer’s WordPress website merely because the plugin is installed.

If the customer voluntarily sends diagnostic exports, screenshots or logs to us for support, those materials are processed under Section 4 of this Policy.

8. Cookies, Consent Management, Elementor and Statcounter

The website uses Complianz for cookie and consent management. Complianz stores functional consent preferences and provides the cookie banner and consent-management interface. Functional storage necessary to remember your privacy choices may be used without optional analytics consent where permitted by law.

The website is built using WordPress and Elementor. Elementor is used for page creation and presentation. Any browser storage generated by Elementor for site/editor functionality is treated according to its actual purpose and the consent configuration applied by the website.

8.1 Statcounter analytics

We use Statcounter to understand how visitors interact with the website and to improve its content, design and technical performance. Statcounter may process information such as:

• date and time of visit;
• IP address;
• browser and operating system;
• device type and screen size;
• referring page or search engine;
• current page URL and page title;
• whether a visitor appears to be a first-time or returning visitor.

Statcounter may use cookies or similar technologies for statistical purposes, including a cookie used to distinguish first-time and returning visitors.

Legal basis: Statcounter analytics is activated only after the visitor has provided the required statistics/analytics consent through the Complianz consent interface. The legal basis for this processing is Article 6(1)(a) GDPR (consent), together with the applicable rules on storing or accessing information on a user’s device.

You can refuse analytics cookies without losing access to the main informational content of the website. You can also withdraw or change your consent later using the Complianz consent-management interface available on the website.

For further details about Statcounter’s processing, see Statcounter Legal / Privacy information.

8.2 Cookie Policy

The current cookie inventory, purposes, providers, retention periods and consent categories are maintained through the Complianz Cookie Policy generated for this website. Because cookies and scripts can change when the website configuration changes, the Complianz Cookie Policy and consent interface should be treated as the current source for the site’s cookie list.

9. Recipients and Service Providers

Depending on your interaction with us, personal data may be disclosed to or processed by the following categories of recipients where necessary:

• Rackhost Zrt. – website hosting and email infrastructure;
• Lemon Squeezy – Merchant of Record, checkout, subscription and licence-related services;
• Statcounter – website analytics, only where the required consent has been given;
• authorised professional advisers, accountants or IT service providers where necessary;
• courts, authorities or public bodies where disclosure is required by law.

Complianz is used as a local consent-management solution on the WordPress site. Elementor is used as the website page builder.

10. International Data Transfers

We operate from Hungary. Some external providers used in connection with payment, licensing or online services may process data outside Hungary or outside the European Economic Area.

Where a transfer of personal data from the EEA to a third country requires a transfer mechanism under the GDPR, the relevant provider and/or Controller must rely on an applicable adequacy decision or appropriate safeguards, such as Standard Contractual Clauses, as required by Chapter V GDPR.

Lemon Squeezy and other external providers describe their own international-transfer practices in their privacy documentation. Statcounter states that its service is governed by Irish law and provides its own privacy information for data collected through its analytics service.

11. Data Retention

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, subject to legal obligations and legitimate claims periods. In particular:

Data category	Typical retention
Ordinary server/access logs	Approximately 30 days, unless needed longer for security or legal reasons
Support correspondence	Up to 5 years after closure of the matter
Order/subscription/licence records	For the active commercial relationship and any required legal/claims period
Accounting documents held by the Controller	Up to 8 years where required by Hungarian law
Statcounter analytics data	According to the configured Statcounter account settings and Statcounter’s applicable retention practices
Complianz consent preferences	According to the active Complianz consent configuration and cookie policy
Local Depenova Impact Map scan/runtime data	According to the customer’s plugin settings and local database retention choices

12. Your GDPR Rights

Where the GDPR applies, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete personal data;
• request erasure where the legal conditions are met;
• request restriction of processing;
• receive certain personal data in a portable format where the conditions for data portability apply;
• object to processing based on legitimate interests;
• withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal;
• object at any time to direct marketing, if direct marketing is introduced in the future.

To exercise your rights, contact hello@wpimpactmap.com. We may request information necessary to verify your identity. We will respond within the time limits required by applicable law, normally within one month under the GDPR.

13. Right to Lodge a Complaint

You may lodge a complaint with the supervisory authority competent for your habitual residence, workplace or the place of the alleged infringement. In Hungary, the supervisory authority is:

14. Security

We use organisational and technical measures appropriate to the nature of the data and the risks involved. These include limiting access to business accounts, using encrypted transport where supported, keeping software updated and reviewing access to service-provider systems.

No internet-based system can be guaranteed to be completely secure. Customers remain responsible for securing their own WordPress installations, administrator accounts and backups.

15. Children and Automated Decision-Making

Depenova Impact Map is professional WordPress administration software and is not directed at children. We do not knowingly seek personal data from children through the product website or sales process.

We do not use website visitors’ personal data for solely automated decisions that produce legal effects or similarly significant effects. Depenova Impact Map’s Impact Score and confidence classifications assess technical WordPress components and do not profile website visitors.

16. Third-Party Websites

The website may link to external services, including WordPress.org, Lemon Squeezy and Statcounter. Once you leave our website, the external provider’s own privacy policy applies to its processing.

17. Changes to this Privacy Policy

We may update this Privacy Policy when the product, website, service providers or applicable legal requirements change. The current version and “Last updated” date will be published on this page.

18. Contact

For privacy questions or requests relating to your personal data, contact: