Privacy notice

Last updated September 4, 2026

Website privacy

This site is designed to provide product information with minimal tracking. Analytics is disabled unless it is configured and a visitor gives the required preference.

Contact messages

The site's essential server-side session stores the first eligible landing path, bounded campaign tags, and the referring HTTP(S) page without its query or fragment. If you submit the contact form in that session, those first-touch details may be stored with the details you provide so Cart Rebound can respond and understand which owned campaigns or referring pages led to inquiries. They are not sent to the optional analytics provider by the contact flow and are not used to build a cross-session profile.

Contact submissions, including the details you provide and any stored attribution, are retained for the configured period. That period defaults to 365 days and is constrained to 30 days through 10 years. Expired submissions are permanently deleted by the next daily purge.

Short-lived abuse-defense data uses a daily-rotating, one-way keyed IP hash rather than storing the raw IP address. The configured cleanup threshold defaults to 7 days, cannot be set above 30 days, and is applied by the next daily purge. Do not submit customer records, credentials, payment data, or recovery tokens.

Plugin data

The Cart Rebound WordPress plugin stores cart and recovery information in the merchant's WordPress database. Each merchant is responsible for its own privacy notice, lawful basis, security, retention, and request handling.

Questions

Use the contact page for privacy questions about this website.