Privacy, data and uninstall
ShareCrew stores as little as the job needs, keeps it on your site, and holds no customer's name, email or address.
What is stored, about whom
| Who | What | For how long |
|---|---|---|
| A visitor who follows a link | A one-way hash of IP address and browser with a salt that changes daily, the referring site, the landing path, a country code and a device class. Never the IP address or browser string itself. | Keep click data for (days), 90 by default; daily totals are kept |
| A visitor with the cookie | sharecrew_ref: an opaque, signed click number, first-party |
The attribution window |
| A customer who orders | Which creator their order was credited to and why. A customer lock holds their account ID, or a one-way hash of their email for a guest. | Attributions are accounting records; a lock is deleted the night after it expires |
| A creator | Name, email, handle, platforms, application, tax profile, payout details (encrypted), notes | Until erased |
The cookie and consent
The cookie is first-party and not strictly necessary, which is why the default tracking mode waits for marketing consent through the WP Consent API. ShareCrew shows no consent banner of its own. See Tracking modes and consent.
ShareCrew adds suggested wording to WordPress's privacy policy guide (Settings → Privacy) describing the cookie, the click log, the attribution record and the customer lock.
Export and erase
ShareCrew registers with WordPress's own Tools → Export Personal Data and Tools → Erase Personal Data, as ShareCrew Creator Program and ShareCrew Customer Lock. The Settings → Privacy card links to both.
- Erasing a creator archives them and replaces their name, handle, platforms, application, tax profile and payout details with a placeholder. Commission and payout amounts are kept as your accounting records, the way WooCommerce keeps orders after a customer erasure, and the eraser says so.
- Erasing a customer deletes their customer locks, found by email and account. Their orders are covered by WooCommerce's own tools.
- Deleting a user account deletes their locks and erases their creator record too.
Program terms
Settings → Privacy → Download a program-terms skeleton gives you a Markdown starting point filled from your settings. It is not legal advice: have it reviewed before you publish it.
Requests to outside services
None. ShareCrew calls no ShareCrew-hosted or third-party service.
The one HTTP request it makes is the daily check of your own site's
/go/_probe address. QR codes are drawn in the browser.
Creator avatars come from WordPress's avatar setting, which by
default the visitor's browser loads from Gravatar.
Deactivating and deleting
Deactivating erases nothing.
Deleting the plugin from the Plugins screen erases every ShareCrew record: its tables (creators, commissions, payouts, statements, the activity log), its options, its scheduled jobs, its user preferences and its URL rules. Creator code coupons are moved to the trash, so they can be restored. ShareCrew's notes on WooCommerce orders are kept as accounting records.
Export what your books need first — Commissions → Export CSV
and each payout run's CSV. To keep everything when deleting, add this
to wp-config.php first:
define( 'SHARECREW_KEEP_DATA', true );Installing ShareCrew again then picks the records up. Settings → Advanced says which of the two will happen.