Privacy Policy

Last updated: July 2026

1. Introduction

Welcome to Nexura Security. This Privacy Policy explains how we collect, use, and protect your data when you use our website (nexurasecurity.com) and the Nexura Security WordPress plugin. We are committed to protecting your privacy and ensuring full transparency in our data practices.

2. Open Source License

Nexura Security (free version) is an open-source software distributed under the GNU General Public License v2.0 or later (GPLv2+). The full source code is publicly available on GitHub and WordPress.org.

This means you are free to use, study, modify, and redistribute the software, subject to the terms of the GPLv2+ license.

3. Data Collection via the Plugin

The Nexura Security plugin is designed to operate primarily on your own server. We do not track, collect, or store personal data of your website visitors on our servers. However, some security features require communication with third-party APIs to verify threats:

• Cloudflare Turnstile & Google reCAPTCHA: If enabled, visitor browser signals are processed by Cloudflare or Google to prevent bot spam. Subject to their respective privacy policies.
• HaveIBeenPwned API: If enabled, only the first 5 characters of a SHA-1 hash of user passwords are checked to ensure they haven't been breached (k-Anonymity model). Passwords are never sent in plain text.
• Google Safe Browsing: Site URLs may be checked for malware flags via Google's Safe Browsing API.
• Nexura Threat Intel Cloud: Malicious IP addresses attacking your site may be anonymously synced to our global blocklist to protect all network users. No personal data is shared.

4. Data Collection via the Website

When you visit nexurasecurity.com, we may collect standard diagnostic data (such as IP addresses, browser types, and usage analytics) to improve our services and monitor website performance. We do not sell or share this data with third parties.

5. Freemius Integration

If you opt-in to usage tracking during plugin activation, diagnostic data (such as WordPress version, PHP version, and plugin settings) will be securely transmitted to our licensing partner, Freemius. This helps us improve the plugin. You can opt out at any time from your WordPress dashboard.

6. Cookies

Our website may use essential cookies required for site functionality. We do not use tracking or advertising cookies. Third-party services integrated on the site (e.g., Cloudflare) may set their own cookies as described in their respective privacy policies.

7. Your Rights

You have the right to:

• Access, modify, or delete any personal information we may hold about you
• Opt out of usage tracking at any time
• Request data portability or erasure under GDPR

Since the plugin stores data on your own server, you have complete control over your security logs and user data within your WordPress dashboard.

8. Children's Privacy

Our services are not directed at individuals under the age of 13. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "Last updated" date.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: [email protected]
• WordPress.org: Support Forum
• GitHub: Issue Tracker