Local storage
Cart, identity, activity, and attribution records live in the WordPress database.
Your cart records stay with your store.
Cart Rebound does not send cart data or product telemetry to the author.
Cart Rebound
Recovery control plane
-
Shopper Provides checkout context
-
WordPress store Keeps cart and recovery history
-
Mail provider Processes configured delivery
-
WooCommerce order Supplies the paid status
Practical controls for accountable recovery
Guest capture choice
Guest tracking is off by default and can be enabled when it fits your notice and consent model.
Retention windows
Choose how long unrecovered and converted records remain available.
Privacy tooling
WordPress export and erasure integrations help respond to data-subject requests.
Architecture is not legal advice
Local storage can reduce unnecessary data sharing, but it does not decide whether a message is lawful. Document your purpose, tell shoppers what happens, collect only what you need, choose a retention period, protect admin access, and honor applicable access or deletion requests.
Your host, analytics, SMTP provider, and other plugins may process data independently. Review the privacy-conscious recovery guide and publish a store-specific privacy notice.
Separate local architecture from legal decisions
Storage location, guest capture, and privacy responsibility are related but not interchangeable.
Where is recovery data stored?
Cart and recovery records stay in your WordPress database. The plugin does not send cart data or telemetry to the author. Your hosting, email provider, and other installed services may have their own data practices.
Can it track guest carts?
Yes, when guest tracking is enabled. The plugin can capture contact details entered during checkout. Store owners remain responsible for consent, privacy notices, and a lawful basis for recovery messages.
Does the plugin make my store legally compliant?
No plugin can make that promise. Cart Rebound provides retention controls and WordPress privacy export and erasure integrations, while the store owner remains responsible for consent, notices, retention choices, and local law.
Build a deliberate recovery program
Start with guest tracking disabled, document your choices, then test on staging.
- Install
- Create a test cart
- Restore checkout
- Verify the linked order