WPUploader ("we") is a platform for WordPress developers to upload, check the quality of, and ship plugins/themes to WordPress.org. This document explains what data we collect and how we treat it — especially your WordPress.org credentials, since that's the most sensitive part of this service.
Core principle: your WP.org credentials stay yours
We never hold our own committer access on WordPress.org. You provide your own WP.org account application password, and every resulting commit is recorded under your name in WordPress.org's public SVN log — not ours.
You choose one of three credential storage modes:
Session Default
Credentials live in process memory for one deploy only, encrypted between internal processes, discarded when the job ends. Never written to disk.
Stored
Encrypted with AES-256-GCM before being saved, under a per-account key. Suited for routine deploys.
GitHub Actions
We store nothing at all — we generate a workflow YAML and the secret stays in your own GitHub repository.
Passwords are never written to logs, error trackers, telemetry, or command line arguments. You can delete — not just deactivate — stored credentials at any time with one click, which genuinely removes the ciphertext from our database.
Other data we collect
- Account
- Email and password (hashed, never stored as plain text) for authenticating to this platform itself.
- Files you upload
- Plugin/theme ZIPs, build results, and deploy logs are kept in our private object storage for release history and audit purposes — never shared with third parties.
- Audit logs
- We record important actions (credential added, release deployed, patch applied) for security and troubleshooting on your own account.
Your right to delete everything
Your data is yours. You can erase your account from account settings at any time, without asking us and without giving a reason.
Deletion is immediate and permanent — not a flag on a row we keep. It removes:
- Your login, email address, and every session token.
- Your WordPress.org credentials, including stored encrypted ones.
- Organizations you solely own, with their projects, releases, uploaded ZIPs, asset images, and deploy logs — deleted from our database and from our object storage.
Organizations you share with another owner are not deleted, since they are not solely yours; your membership is removed and the remaining owners keep their work. There is no grace period and no backup copy held back for us to restore from.
One limit we want to be plain about: releases you already deployed to WordPress.org live in WordPress.org's own public SVN repository, under your WP.org account. Deleting your account here cannot remove them from there — that is WordPress.org's system, not ours.
What we don't do
- We don't sell your data to third parties.
- We never mutate code or commit without your explicit approval.
- We don't share WP.org credentials across team members — each member sets up their own.
Questions
If you have questions about this policy or how we handle your data, reach us via the contact page.