Privacy
Nothing about your visitors leaves your site.
Assignment happens in the visitor's browser, results live in your database, and the free plugin never calls abtestwp.com. Here is exactly what is stored, and what never is.
What is stored per event
Test id, variant key, event type (impression or conversion), the visitor id, device class (desktop, mobile or tablet, derived in the browser), revenue value for the purchase goal, the page path for conversions, and a UTC timestamp. A unique index on test, visitor and event counts each visitor once.
What is never stored
IP address, user agent, referrer, user account. The IP is used only as a hashed key for a 60-second rate limit (600 events a minute per address, using the visitor's real address behind Cloudflare) and is discarded. Known crawlers are dropped by user-agent pattern before anything is written.
The visitor id
A random id generated in the browser and kept in localStorage. It travels with each impression or conversion to your own server, where it de-duplicates the counts. One id per browser for every test on the site, with no expiry until the visitor clears site data. No cookies anywhere. For a URL test across two sites it travels in the redirect URL to the other site, where it is kept in that site's local storage so conversions there can be credited back to the test.
Retention
Once a test is stopped, its raw rows older than the retention window (90 days by default, settable from 1 to 3,650) are rolled up into daily totals per variant and deleted, so the device breakdown and page paths of finished tests age out while totals stay. Running tests keep every raw row, so a late conversion is never lost.
Consent
The plugin stores no names, email addresses, IP addresses or account ids - only the random per-browser id it generates itself. Whether local storage for testing needs consent under ePrivacy is a legal call for the site owner; we do not make that call for you.
AI features
Optional and admin-side only. Copy suggestions send the selected text, page URL, title, description and tag name; AI Magic sends the element's HTML, the part of it you focused on, its current variant CSS, the instruction, the page title, and a digest of computed styles from the live page (colours, fonts, spacing, shadows and background images, plus the theme's root CSS variables). Calls go from your server straight to the provider you configured with your own key. Nothing touches abtestwp.com. No AI usage is logged, the key stays in your WordPress options readable only by administrators, and AI Magic cannot add JavaScript to your page.
Licence and updates (Pro)
Activating your licence sends your licence key and your site's root domain to Dodo Payments' licence API; the daily re-check and deactivation send the key and the activation id. Once the Pro update server is live, update checks go to it and a successful answer is cached for six hours, retried every 30 minutes while it is unreachable. Each check sends the plugin slug and the installed Pro version, your licence key, activation id, root domain, an anonymous site id and your PHP and WordPress versions. The free plugin never calls abtestwp.com.
Uninstall
By default your tests and results are kept; a clean-delete setting removes everything.
This page describes the plugin. The website itself (abtestwp.com) and the Pro checkout run by Dodo Payments have their own notices: the privacy policy and the terms.