Privacy and data

Last updated: October 3, 2026

WooCommerce data and pickup records

WooCommerce handles cart sessions, addresses, shipping choices, orders and their retention. The Sidecart shares the WooCommerce session and cookies. Pickup selections and instructions can be stored with the order. IPS Cart settings and pickup records are scoped to the individual site in a multisite network.

Optional checkout traces

Tracing is disabled by default. When enabled, technical events and sanitized context are stored locally. Known address, contact, payment and authentication fields are redacted. The default buffer keeps the latest 150 events, pruning older events as new ones arrive; this is a count limit, not a number of days.

Managers can clear the buffer in Diagnostics. Clearing also resets the corresponding last-verified diagnostic state. IPS does not automatically receive traces. Review exported diagnostics before sharing them and turn tracing off when the investigation is complete.

Payment-provider connections

When an enabled and eligible payment method or wallet slot is rendered, its provider SDK can load before the customer clicks its button. The provider receives connection data such as IP address and user agent. Payment and shipping flows can also send amounts, currency, order references, customer/address information and payment tokens needed for the transaction.

Stripe and WooPayments use their configured Stripe services; PayPal, Mollie and Amazon Pay use the corresponding provider services. Hosted card fields send card details through the provider SDK. Availability and data handling depend on the installed gateway and enabled method. Review the documentation and privacy information of the providers actually used by the shop. Externally hosted images also contact their image host.

Pro Cart Recovery

Recovery stores eligible captured cart data, an email address, activity and reminder state, protected link information and related recovery reporting data. Automatic capture records no consent timestamp; checkbox capture records the explicit selection. Reminder emails use WooCommerce’s mail system.

Default retention is 30 days from capture and is configurable from 1–90 days for new entries. Use the confirmed data-management actions for selected removal. Disabling capture is separate from deleting retained entries; retention processing can continue while Pro is active. See Cart Recovery for restore, unsubscribe and reporting behavior.

Updates and uninstall

The WordPress.org package contains no IPS license/update service integration; updates come from WordPress.org. IPS packages use the IPS distribution channel, with licensed updates where applicable.

Uninstall retains plugin data unless deletion was explicitly enabled for that individual site. The plugin’s cleanup does not delete WooCommerce orders or customer accounts. Before changing editions or uninstalling, review saved Pro configuration, recovery data and any exported files you keep separately.