Your data, explained
Understand where the data goes.
Frictions recordings stay on your WordPress hosting. Website accounts, billing and support are separate from the recordings on your store.
Recordings on your store
Eligible consented checkout activity goes to your same-origin WordPress capture endpoint and private database tables. Authorized WordPress users review it locally. There is no central Frictions replay upload.
The recorder excludes entered values, original page text, images and payment frames. It retains protected structure, safe labels, timing and normalized events. Database and hosting administrators can access stored data; compressed recording chunks are not encrypted by the plugin.
Your controls
Configure consent, permissions, retention and storage budgets. Pause capture or delete recordings in WordPress. Bookmarks still expire. Hosting backups, exported briefs and optional email notifications are separately controlled copies.
Team notes can contain personal information if you enter it. Review notes and exports before sharing. Your store remains responsible for shopper notices, lawful processing and its hosting providers.
Pro discovery preferences and an explicitly chosen upgrade task use local browser storage, scoped to your WordPress account and store. Hidden suggestions and preview-navigation choices stay in that browser until restored or its storage is cleared. Choosing a feature-specific Get Pro action can save the tool name, a recording reference and playback time, and supported filter choices for up to seven days; it does not save recording contents, note text or email addresses. Clear the saved task in Frictions or clear that browser’s site storage to remove it. These references are not appended to the pricing link. Opening a preview alone saves no upgrade task, sends no email and grants no Pro access.
Your Frictions website account
Purchase and account services use the information you provide to manage access, billing and support. Stripe processes checkout and billing-portal information. Your accepted purchase contract records the terms and order details.
Support requests are handled in our private support desk. Read support privacy before submitting personal data. Newsletter signup is optional and separate from a support request or purchase; confirmation and unsubscribe controls are provided.
Optional installation sharing
Free works without an account or installation report. During setup, a separate, unchecked choice lets a WordPress administrator share the displayed installation domain and compatibility details with Frictions. Skipping it sends no installation report. This permission is separate from shopper recording consent and from marketing email signup.
If you opt in, the plugin sends the domain, WordPress, WooCommerce, PHP and Frictions Free versions, and site language to our first-party registration service. It also uses a random connection identifier, a private connection credential and the consent-notice version. We keep a credential fingerprint, consent and reporting timestamps, and the selected scopes. Compatibility reports refresh no more than weekly. No recordings, order records, shopper email addresses, entered checkout values, plugin inventory or store settings are included.
Review or stop sharing in Frictions → Settings → Communication. A successful stop request removes the live domain and compatibility details. They also expire after 90 days without a report and are removed by daily cleanup; an outage can delay physical cleanup. Stopping installation sharing does not unsubscribe emails or release a Pro licence. To change the combination of sharing choices, stop the existing connection first and make a new choice.
We retain minimal, pseudonymous connection and credential fingerprints and revoked-scope markers for as long as this endpoint operates. These markers contain neither the domain nor the email address and prevent a delayed request from restoring a withdrawn choice. This protection is separate from the 90-day installation-detail retention.
Optional email signup from the plugin
A separate, unchecked choice lets you enter an email address for Frictions tips and product news. It works without installation sharing; an email-only request sends no installation domain or compatibility report. If you choose both scopes, their records share the same random connection identifier. You can skip both and use Free normally.
New signup requires the confirmation email and an explicit confirmation-page action. The plugin does not reveal whether an entered address was already subscribed. Existing subscriptions keep their preferences and are not taken over by a new plugin connection. Additional article, offer, purchase-personalization and click-tracking choices remain separate in the newsletter preferences.
A newly created pending signup expires after 48 hours; confirmed subscriptions expire after 730 days unless renewed. The plugin’s email association lasts only while its own pending or active subscription exists. Unsubscribe Frictions emails in Communication cancels that connection’s new pending signup or unsubscribes its own confirmed newsletter subscription across all topics, including additional topics you selected later. For a pre-existing subscription, use its email preferences or unsubscribe link. Account, purchase, support and store-generated Pro alerts are separate.
The newsletter privacy notice explains confirmation, protected withdrawal records, cookies, preferences and your rights. We retain minimal scope-revocation fingerprints as described above to prevent a late plugin request from undoing withdrawal. Routine service and abuse-prevention processing also applies to requests to the endpoint.
Pro licence registration and updates
Installing Pro opens a licence-connection page. Connecting the key from your purchase account registers the canonical WordPress home URL and a random installation identity against your purchased site allowance. A new Pro installation needs one valid activation before its local review tools open. This does not subscribe you to marketing or upload recordings. After successful activation, local tools remain available on the activated site while offline or after updates and support expire. A copied site needs its own activation. Clearing the local connection locks Pro tools immediately without deleting retained data. An account-side release takes effect when the site next successfully checks its licence.
The service checks the key, site and installation identity and update/support entitlement. The plugin verifies the signed offer and its WordPress, WooCommerce, PHP and Free-version requirements before accepting an update. It retains the active site URL, hashed installation identity, purchase and licence-generation references, and registration/check timestamps. The submitted Pro version is checked for valid formatting and is not retained in the activation record. The plugin stores its connection credential locally and uses it for entitlement checks and signed update offers. The purchase account provides manual downloads and registered-site controls.
Disconnect the site in the plugin or release its registration in your purchase account when moving installations. Release removes the live site URL and frees its seat. A pseudonymous site and installation reference, purchase/generation binding and timestamps remain with the purchase/security record to reject stale credentials; they are removed when the associated purchase record is erased. Purchase retention and any required billing records are separate. Contact us about access, correction or deletion using the details below.
Website performance measurement
Cloudflare measures loading speed and responsiveness on website pages where its browser beacon runs, including the blog. The browser sends performance timings, a temporary page-load identifier and page/referrer URL information to Cloudflare. Cloudflare states that the beacon uses no cookies or browser storage and does not track visitors across websites. This is website performance measurement; it does not upload recordings from your WordPress store.
This measurement can run without a website analytics choice and with Global Privacy Control or Do Not Track enabled. Availability varies by location and browser. See Cloudflare’s performance data and privacy explanation for collection, processing and regional limits. These website requests are separate from the shopper-consent controls you configure in the Frictions plugin.
Website records and your requests
Account and purchase records are separate from recordings on your store. Your accepted contract records the purchase terms and order details; use your purchase account or contact us for account and billing questions. Read the purchase terms for billing and access.
Support conversations include the messages and contact details you provide. Closing a ticket does not automatically delete it. The support privacy notice explains the desk’s records, AI-assisted drafting and how to request access, correction or deletion.
Newsletter choices are separate from purchases and support. The newsletter privacy notice sets out subscription expiry, withdrawal records and browser cookies. Use a newsletter’s preferences or unsubscribe link to change your choices.
For access, correction, deletion, or questions about retention and recovery copies, contact us using the details below or your private support ticket. For a recording on a store, contact that store’s operator.
Contact
Frictions is operated by A.M.E.X. Internet Marketing ltd. For an account, billing or website-data question, contact Show email. For a recording held by a store, contact that store’s operator.
The interactive demo
The interactive demo gives you a separate, temporary WordPress workspace with fictional recordings and Frictions 1.1.2 Free or Free + Pro plugins. Bookmarks, notes, saved views and investigation changes are real changes inside that demo. They are not shared with other visitors or connected to your store. No signup is required.
Access lasts up to 30 minutes. Reset or end the demo to discard its workspace; expired workspaces lose access immediately and are removed by scheduled cleanup. Use fictional text only. Files you download remain on your device after the demo ends. External requests, mail delivery and real purchases are disabled in the demo.
The demo gateway keeps session identifiers, edition, start and expiry times, and status. Keyed browser and network hashes limit repeated starts; start-limit records are removed after one hour. Successfully cleaned, retired session records are removed after their first 24 hours. The demo data and limits notice explains these records, temporary browser access and cleanup in more detail.