Privacy policy
Service-policy draft · Updated 14 October 2026
Who operates the service
WeOxiders is operated under the WeOxide Services brand, made by Ionuț Shiro. The operator must add the legal data-controller identity, address and privacy contact before paid launch. This policy describes the application's current data flows; legal bases and jurisdiction-specific notices must be confirmed by the operator.
Information we process
Account records contain your name, email, password hash, account role and registration date. We store your website name, chosen template, editable server/community details, SEO fields, uploaded images and connected-domain verification records. Payment records contain provider references, customer/payer references, gross amount, currency, payment status, payment time and test/live mode. We also retain owner audit events and temporary rate-limit counters. The application does not store full card details or your PayPal password.
Why the information is used
We use this information to authenticate accounts, save and publish customer websites, verify domain ownership, reconcile subscriptions, manage access, prevent abuse and investigate support/security issues. Public website content is visible to visitors and may be indexed by search engines. Do not place private data in public website fields or uploaded images.
Providers and external links
The hosting infrastructure and Cloudflare process traffic and may keep technical logs such as IP addresses, requested URLs and security events under their own settings and policies. Stripe or PayPal process payment and billing data when you choose that provider. Checkout redirects to the provider; payment-provider scripts are not embedded on the platform. Ko-fi, Discord, Steam and other links open external services governed by their own policies. Personal data may be processed in other countries by these providers; the operator must confirm the applicable transfer safeguards and processor arrangements.
Cookies and browser storage
Essential session cookies support sign-in, security and form protection. A local-storage preference remembers acknowledgement of the cookie notice on the platform origin. The application currently embeds no advertising or analytics trackers. Infrastructure and external services may have their own cookies. See the Cookie policy for details.
Retention and deletion
Account data, site settings, uploads, payment history and audit records are retained until removed by the operator; there is not yet an automated account-deletion or fixed retention schedule. Expired publication is not the same as deletion. Unreferenced images older than one day and expired rate-limit entries are eligible for the operator's cleanup command; they are not guaranteed to be deleted immediately. The operator must define and publish a retention schedule, including backups and legally required financial records, before paid launch.
Security and your choices
Passwords are hashed, access is checked per website and provider credentials are stored outside the public document root. No system can guarantee absolute security. You can edit your website content in your panel and ask the operator for access, correction, export or deletion of account data, or raise an objection or privacy concern. Rights depend on applicable law; you may also contact the relevant supervisory authority where applicable. Account deletion requests may require identity verification and lawful retention of financial or security records. Do not send passwords in a request.