Privacy Policy

This Privacy Policy explains how DevItems LLC ("DevItems", "CourseGlade", "we", "us", or "our") collects, uses, and protects information when you visit our marketing and documentation website at courseglade.com (the "Website"). It applies to the Website only.

About the CourseGlade plugin. This policy describes the Website. The CourseGlade WordPress plugin is self-hosted: it stores courses, enrollments, orders, and student data on your own WordPress site and database. That data is not transmitted to or stored on CourseGlade or DevItems servers. Data leaves your site only through services you connect (such as Stripe, Zoom, Google Meet, and Google Classroom), each under its own terms. The plugin's data handling is controlled entirely by you as the site owner.

1. Information We Collect

We collect a limited amount of information when you use the Website:

• Contact information. If you fill out a contact form, request support, or email us, we collect your name, email address, and the contents of your message.
• Purchase information. If you purchase CourseGlade Pro, checkout is handled by Lemon Squeezy, which acts as the merchant of record and processes your billing details. We receive a record of the transaction, your license, and the email address associated with the purchase. We never see or store your full card details.
• Analytics and advertising data. We collect information about how the Website is used — pages visited, referring URLs, approximate region (derived from IP address), browser and device type, and interactions such as clicking a pricing button or completing a purchase. See section 3 for detail.
• Cookies and similar technologies. We set a small number of first-party cookies (see section 5).

2. How We Use Information

We use the information we collect to:

• Respond to support requests and inquiries;
• Provide, deliver, and manage CourseGlade Pro licenses and renewals;
• Operate, maintain, and improve the Website and our products;
• Measure the performance of our advertising and understand which campaigns lead to purchases;
• Send service-related communications you have requested;
• Detect, prevent, and address security, spam, or technical issues; and
• Comply with legal obligations.

3. Analytics, Advertising, and Conversion Measurement

We use Google Tag Manager to load and manage the measurement tools below. Google Tag Manager itself does not collect personal information; it is a container that decides which tags run.

Google Analytics 4

We use Google Analytics 4 to understand how visitors find and use the Website. It records events such as page views, outbound link clicks, clicks on our pricing buttons, and completed purchases, together with the referring source, approximate geographic region, and device and browser information. Google Analytics uses first-party cookies to distinguish one visitor from another. We do not send names, email addresses, or other directly identifying information to Google Analytics.

Google Ads conversion tracking

We advertise on Google. When you arrive from one of our ads, Google appends a click identifier (gclid) to the landing page URL, which is stored in a first-party cookie so that a later purchase can be attributed to that ad. When a purchase completes, we report the transaction — its value, currency, order reference, and which plan was bought — to Google Ads.

Enhanced Conversions (hashed email)

Please read this section carefully, as it involves your email address. To measure advertising more accurately, we use a Google Ads feature called Enhanced Conversions. When you complete a purchase and land on our thank-you page, the email address you used at checkout is irreversibly hashed in your browser using SHA-256 before it is sent to Google. Google uses that hash to match the purchase against a signed-in Google account and attribute it to an ad click.

• Your email address is never transmitted to Google in readable form — only the one-way hash leaves your browser.
• We do not send your name, postal address, or phone number for this purpose.
• The email is read from the page URL once, used to generate the hash, and then removed from the browser address bar so it is not retained in your browsing history. The page is also configured not to pass any referrer information onward.
• This processing is governed by the Google Ads Data Processing Terms.

Cloudflare Web Analytics

Our host, Cloudflare, provides privacy-focused aggregate traffic analytics that do not use cookies and do not track visitors across sites.

Consent

On your first visit we ask for your consent before any analytics or advertising cookies are set. Until you accept, Google’s tags run in a restricted mode: no analytics or advertising cookies are written, advertising identifiers are redacted, and no personal information is sent to Google. This is implemented with Google Consent Mode v2. Your choice is remembered for six months, after which we ask again. You can change or withdraw it sooner by clearing this site’s stored data in your browser — note that your choice is kept in local storage, so clearing cookies alone will not reset it.

Opting out

Beyond declining consent, you can limit this measurement in several ways:

• Block or delete cookies in your browser settings, or browse in a private window;
• Install the Google Analytics Opt-out Browser Add-on;
• Manage how Google personalises ads to you at My Ad Center;
• Use a browser or extension that blocks analytics and advertising scripts.

Blocking these tools does not affect your ability to browse the Website, buy CourseGlade Pro, or receive support.

4. Third Parties

We share information only with service providers that help us operate the Website and our business. These providers may act as processors on our behalf or, where indicated, as independent controllers under their own terms. We do not sell your personal information.

• Lemon Squeezy — payment processing and licensing. Acts as merchant of record for Pro purchases.
• Google (Analytics, Ads, Tag Manager) — website analytics and advertising measurement, as described in section 3.
• Cloudflare — website hosting, CDN, aggregate analytics, and Turnstile bot protection on our contact form.
• Amazon Web Services (SES) — delivery of email sent through our contact form.

Some of these providers are located in the United States. Where personal information is transferred out of the European Economic Area or the United Kingdom, it is done under the safeguards offered by the relevant provider, such as Standard Contractual Clauses.

5. Cookies on This Website

The Website sets a small number of first-party cookies and similar browser storage. Everything in the analytics and advertising categories below is set only after you consent; strictly necessary entries are set regardless, because the Website cannot function without them.

• cookieConsent_<id> (local storage) — strictly necessary. Records which categories you accepted and when, so we do not ask again on every page. Honoured for six months, after which we ask again.
• visitorId_<id> (local storage) — strictly necessary. A random identifier with no personal information in it, used only to tie your consent record to a returning browser so we can evidence that consent was given, as GDPR requires.
• _ga, _ga_<id> — Google Analytics. Distinguish visitors and hold session state. Typically up to 2 years.
• _gcl_au, _gcl_aw — Google Ads. Store the ad click identifier so a later purchase can be attributed to a campaign. Typically up to 90 days.
• Local storage entry beginning cg_purchase_ — set on our thank-you page so that refreshing it cannot report the same order twice. Contains only an order reference, no personal information.
• Cloudflare Turnstile — sets short-lived storage on our contact page to verify you are not a bot.

You can control or delete cookies through your browser settings. Clearing this site’s stored data — cookies and local storage — resets your consent choice and brings the banner back. Declining analytics or advertising cookies will not prevent you from using the Website, buying CourseGlade Pro, or receiving support.

6. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, including for support, billing, and legal or accounting requirements. Contact messages are typically retained for as long as needed to resolve your request and for a reasonable period thereafter. Analytics data is retained according to the retention period configured in Google Analytics. When information is no longer needed, we delete or anonymize it.

7. Your Rights (GDPR & CCPA)

Depending on where you live, you may have rights regarding your personal information, including the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate information;
• Request deletion of your personal information;
• Object to or restrict certain processing;
• Request a portable copy of your information; and
• Opt out of the "sale" or "sharing" of personal information (note: we do not sell personal information).

To exercise any of these rights, email us at [email protected]. We will respond within the time required by applicable law. We will not discriminate against you for exercising these rights.

8. Security

We use reasonable technical and organizational measures to protect information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Website is not directed to children under 16, and we do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be highlighted on the Website where appropriate.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact DevItems LLC at [email protected].