Terms of Service

Last updated: May 3, 2026

These Terms of Service ("Terms") govern your access to and use of Cookiedad, including the website at https://cookiedad.net, the Cookiedad WordPress plugin, the Cookiedad Cloud V3 Engine, support services, documentation, and related services (together, the "Services").

Cookiedad is provided by Vincenzo Greco, trading as Cookiedad, with registered address at Via Lacco Ameno 23/A and VAT/tax ID GRCVCN77R15A089W ("Cookiedad", "we", "us", or "our").

For support, contact support@cookiedad.net. For legal or privacy requests, contact info@cookiedad.net.

By accessing the website, installing or using the plugin, connecting a license, purchasing a plan, or using the cloud features, you agree to these Terms. If you use Cookiedad for a company, agency, client, or other organization, you confirm that you have authority to accept these Terms on its behalf.

1. What Cookiedad Does

Cookiedad is a WordPress privacy and consent management tool. Depending on the version and plan, it may provide:

• a cookie consent banner and preference center;
• cookie and tracking technology scanning;
• cookie categorization and cookie definition management;
• consent logging stored locally in the customer's WordPress database;
• script and iframe blocking tools;
• support for GDPR, ePrivacy-style consent flows, CCPA/CPRA-style preference flows, Global Privacy Control, and Google Consent Mode workflows;
• optional geo-targeting using IPinfo Lite in the premium version;
• optional cloud-generated draft cookie policies and privacy policies;
• support resources, documentation, and video guides.

Cookiedad is a technical tool. It helps you manage consent and prepare compliance materials, but it does not make your website legally compliant by itself.

2. No Legal Advice

Cookiedad, the plugin, the cloud scanner, the policy generator, documentation, support responses, templates, and generated policies are provided for informational and self-help purposes only. They are not legal advice, legal representation, or a substitute for review by a qualified lawyer or privacy professional.

You are responsible for:

• deciding which laws apply to your website or business;
• configuring the banner, categories, scripts, blockers, consent modes, geo-targeting, and legal texts correctly;
• reviewing and approving generated policy drafts before publication;
• ensuring that your website, your privacy notices, and your use of third-party services comply with applicable law.

We do not guarantee that using Cookiedad will prevent regulatory complaints, investigations, fines, claims, damages, or liability.

3. Relationship With Other Terms

These Terms govern the Cookiedad website, plugin, cloud features, support, documentation, and related services.

Purchases, checkout, invoices, taxes, renewals, subscriptions, license management, and payment processing are handled by Freemius, Inc. ("Freemius") as Merchant of Record or payment/licensing provider, as presented during checkout. Freemius terms, privacy policy, checkout terms, subscription terms, refund policy, and the Cookiedad Freemius product legal page also apply to your purchase:

• https://freemius.com/terms/
• https://freemius.com/privacy/
• https://freemius.com/product/21396/cookiedad/legal/eula/
• https://customers.freemius.com/login/

If there is a conflict:

• Freemius transaction terms control payment, tax, invoicing, checkout, refund, and subscription mechanics;
• the applicable open-source license controls your rights to open-source plugin code;
• these Terms control Cookiedad website use, cloud services, support, documentation, acceptable use, privacy roles, and proprietary service access.

4. Open-Source Plugin Code and Proprietary Services

The free Cookiedad plugin distributed through WordPress.org is licensed under the GNU General Public License, version 2 or later (GPL-2.0-or-later), as stated in the plugin files. Nothing in these Terms limits rights you receive under the GPL for GPL-licensed code.

The following are not granted under the GPL unless expressly included in GPL-licensed files:

• the Cookiedad name, logo, trademarks, branding, website content, documentation, and marketing materials;
• access to the Cookiedad Cloud V3 Engine, cloud API, hosted scanner, policy generation service, quotas, usage systems, and hosted infrastructure;
• Freemius checkout, license, account, and subscription systems;
• premium service entitlements, support entitlements, cloud credits, account features, and hosted service access.

A paid plan gives you the plan entitlements shown at checkout or in the pricing page, such as updates, premium features, cloud usage, support, and license activations. It does not transfer ownership of Cookiedad intellectual property, trademarks, or cloud infrastructure.

5. Account, License, and Eligibility

You must provide accurate account, billing, site, and license information. You are responsible for keeping account credentials secure and for all activity under your account or license.

You must not share license keys, API keys, support access, or account access in a way that exceeds your purchased plan or harms the Services.

We may suspend or restrict access to the Services if we reasonably believe that:

• the account or license is being misused;
• payment or subscription status cannot be verified;
• your use creates security, abuse, legal, infrastructure, or reputational risk;
• you materially breach these Terms.

Where practicable, we will provide notice and an opportunity to resolve the issue, unless immediate action is required for security, abuse prevention, legal compliance, or service integrity.

6. Purchases, Renewals, Cancellation, and Refunds

Paid plans may be sold as recurring subscriptions or lifetime licenses, depending on what is shown during checkout.

Unless a lifetime license is purchased, subscriptions renew automatically at the end of the billing period unless canceled before the renewal date. You can manage or cancel subscriptions through the Freemius customer portal, the Cookiedad account page when available, or by contacting support before the renewal date.

Refund eligibility is governed by the refund terms displayed during checkout and in the Freemius product legal page for Cookiedad. Unless a different policy is shown there or mandatory law requires otherwise, Cookiedad's standard approach is a 30-day refund window for first purchases where the product has a material defect or missing material functionality and, after reasonable cooperation with support, we cannot resolve the issue.

Renewal payments, upgrades, additional license activations, plan changes, and purchases made after a previous refund may be non-refundable unless the Freemius policy shown at checkout or mandatory law provides otherwise.

Canceling a subscription stops future renewals. It does not automatically refund past payments, and it may affect future access to premium updates, support, cloud quotas, premium features, and account services.

7. Consumer Rights and Digital Content

If you are a consumer, you keep any mandatory consumer rights that cannot be waived under the laws of your country of residence.

Where applicable law allows digital content or digital services to begin immediately after purchase, you may be asked during checkout to acknowledge immediate performance and any effect this has on statutory withdrawal rights. Any mandatory rights that cannot legally be excluded remain unaffected.

8. Cloud Scanner and Cloud Policy Generator

Cookiedad may use the Cookiedad Cloud V3 Engine to scan websites, classify cookies and tracking technologies, and generate editable draft policies.

When you initiate cloud features, the plugin may send data such as:

• the public site URL, domain, target URLs, selected pages, and scan configuration;
• Freemius installation/user/plugin identifiers, license/account status hints, or a local installation UUID for anonymous installations;
• callback URL, callback token, correlation ID, API key, scan cost, and usage metadata;
• locally prepared cookie scan data and technical findings;
• policy wizard answers entered by the site administrator;
• detected cookie definitions, providers, categories, durations, scripts, storage items, and related technical data;
• plugin version, WordPress environment diagnostics, and service status data needed to provide or troubleshoot the Services.

The cloud scanner may access public pages of the target website in a browser-like way to detect cookies, scripts, trackers, storage, and related technologies. Public page content may therefore be processed incidentally as part of scanning.

You must only scan websites, URLs, or pages that you own, operate, administer, or are authorized to test. You must not use Cookiedad to scan third-party websites without permission, to bypass security controls, to overload websites, or to collect data unlawfully.

The plugin is not designed to send visitor consent logs, visitor IP addresses, or direct visitor identifiers to the Cookiedad cloud during normal visitor browsing.

9. Local Consent Logs

Cookiedad consent logs are stored in the customer's WordPress database, usually in a dedicated consent table. Depending on configuration and version, local logs may include an anonymous identifier, consent preferences, timestamps, modified consent timestamps, and A/B test mode or group.

You, as the website owner or administrator, are responsible for your local consent logs, including retention, exports, deletion, security, and responding to visitor requests.

10. Geo-Targeting, Video, and Third-Party Services

Some Cookiedad features involve third-party services:

• Freemius: account connection, license management, opt-in telemetry, checkout, subscriptions, taxes, invoices, refunds, and customer portal.
• IPinfo Lite: optional premium geo-targeting may send a visitor IP address from the customer's website to IPinfo Lite to resolve country or region.
• YouTube/Google: admin video guides may load from YouTube or youtube-nocookie.com after an administrator opens them.
• YouTube, Vimeo, and Dailymotion: optional video thumbnail functionality may request public video identifiers or video URLs to retrieve thumbnails.
• WordPress mail and email providers: support forms may send support requests and optional screenshots by email.

Your use of third-party services may be subject to their own terms and privacy policies. You are responsible for disclosing third-party processing to your users where required.

11. Support

Support is provided according to your plan and our available support channels. Support may require you to provide site URL, plugin configuration, screenshots, diagnostics, error messages, WordPress environment information, or other details needed to investigate an issue.

Do not send passwords, private keys, payment card numbers, unnecessary personal data, special category data, or sensitive business secrets through support channels unless we specifically request a secure method.

We may refuse support for:

• unsupported, expired, canceled, or unpaid plans;
• heavily modified plugin code outside our control;
• conflicts caused by third-party themes, plugins, hosting restrictions, or custom code;
• unlawful, abusive, or unreasonable requests;
• requests that require legal advice or legal representation.

12. Acceptable Use

You must not:

• use the Services for unlawful, harmful, deceptive, abusive, or unauthorized purposes;
• scan, crawl, test, or process websites without authorization;
• attempt to gain unauthorized access to the cloud service, accounts, licenses, API keys, infrastructure, or customer data;
• overload, disrupt, reverse engineer, scrape, or bypass rate limits of the hosted cloud service, except to the extent mandatory law permits;
• use the Services to distribute malware, spam, phishing, or harmful code;
• remove or misuse Cookiedad branding, notices, or trademarks where not permitted;
• misrepresent Cookiedad as providing legal certification, guaranteed compliance, or legal advice;
• resell, sublicense, or provide hosted access to the Services except as allowed by your plan or by written agreement.

13. Customer Content and Generated Content

"Customer Content" means data, URLs, configurations, wizard answers, cookie descriptions, policy drafts, screenshots, support messages, and other content submitted to or processed through the Services.

You retain your rights in Customer Content. You grant Cookiedad the limited rights needed to provide, secure, troubleshoot, maintain, and improve the Services, including scanning target pages, generating policy drafts, storing scan results, and responding to support requests.

Generated policy drafts are based on the information provided and technical scan results available at the time. They must be reviewed and adapted before publication. You are responsible for the final content you publish.

14. Privacy

Our Privacy Policy explains how we collect and process personal data:

https://cookiedad.net/privacy-policy/

The plugin may also add suggested privacy disclosure text inside WordPress or in plugin documentation. Those disclosures are intended to help website owners describe how the plugin works on their own websites.

15. Data Processing Addendum for Cloud Services

This Section 15 is a data processing addendum ("DPA") and applies when Cookiedad processes personal data on behalf of a customer through the Cookiedad Cloud V3 Engine or related support services.

15.1 Roles

For personal data processed in your own website, consent banner, local WordPress database, local consent logs, local exports, and local configuration, you are generally the controller or business, and Cookiedad does not receive that data unless you send it to us.

For personal data submitted to the Cookiedad cloud through scans, policy generation, support, or diagnostics, you are generally the controller or business, and Cookiedad acts as processor or service provider to the extent we process that data on your behalf.

For Cookiedad account administration, product analytics, security, support, website visitors to cookiedad.net, and direct communications with you, Cookiedad acts as controller.

Freemius acts under its own terms and privacy policy for checkout, billing, tax, subscription, license, and customer portal processing.

15.2 Subject Matter, Duration, Nature, and Purpose

The subject matter is the processing of Customer Content and related technical data needed to provide Cookiedad cloud scans, policy generation, usage checks, troubleshooting, support, security, and service maintenance.

The duration is the period during which you use the Services, plus any retention needed for support, security, abuse prevention, legal obligations, backups, accounting records, or dispute resolution.

The nature and purpose of processing include receiving, hosting, analyzing, scanning, classifying, generating, storing, returning, deleting, and securing Customer Content and technical service data.

15.3 Categories of Data

Depending on your use, processed data may include:

• website URLs, domains, target pages, public page content, scan configuration, scan results, cookie definitions, script information, storage information, and technical identifiers;
• policy wizard answers, company or website information entered by administrators, selected languages, and generated policy drafts;
• Freemius or local installation identifiers, license/account status hints, callback tokens, API keys, correlation IDs, usage/quota information, plugin version, WordPress environment diagnostics, and support data;
• personal data that appears incidentally on public target pages, in screenshots, in support messages, or in wizard answers.

The data subjects may include customer administrators, customer personnel, website visitors whose data appears incidentally in Customer Content, and individuals mentioned in support materials or wizard answers.

15.4 Customer Instructions

Cookiedad will process personal data only on documented instructions from the customer, including these Terms, product settings, feature requests made through the plugin, support requests, and any written agreement between the parties, unless law requires otherwise.

You are responsible for ensuring that your instructions are lawful and that you have the required rights, notices, legal bases, and consents for data submitted to the Services.

15.5 Confidentiality and Security

Cookiedad will restrict access to personal data to personnel, contractors, and providers who need access to provide the Services and are bound by confidentiality obligations.

Cookiedad will maintain appropriate technical and organizational measures designed to protect personal data, including access control, encrypted transport where supported, infrastructure security, least-privilege practices, logging, backup controls, and vulnerability response processes appropriate to the nature of the Services.

15.6 Sub-Processors

Cookiedad may use sub-processors and service providers for cloud hosting, infrastructure, security, monitoring, email, support, and other service operations. Current important providers may include:

• Google Cloud Platform or similar cloud infrastructure providers for hosting, scanning, processing, storage, logging, and security;
• email, mailbox, and support tooling providers for support requests;
• professional advisers and security providers where necessary.

Freemius is an integrated third-party provider for checkout, licensing, subscription, account, tax, and payment-related services. In many payment and Merchant of Record contexts, Freemius acts under its own terms and privacy policy rather than solely as a Cookiedad sub-processor.

The plugin may also contact third-party services directly from the customer's website, such as IPinfo Lite for optional geo-targeting or video providers for thumbnails. Where those providers are contacted directly by the customer's site and not through Cookiedad cloud infrastructure, they may be independent providers selected or enabled by the customer rather than Cookiedad sub-processors.

Cookiedad will impose data protection obligations on sub-processors that are appropriate to the processing they perform.

15.7 International Transfers

Cookiedad may process and transfer data in countries where Cookiedad or its providers operate. Where GDPR, UK GDPR, or similar laws require transfer safeguards, Cookiedad will rely on appropriate mechanisms such as adequacy decisions, standard contractual clauses, data processing terms, or other lawful safeguards.

15.8 Assistance, Requests, and Deletion

Taking into account the nature of the Services, Cookiedad will provide reasonable assistance for data subject requests, security obligations, data protection impact assessments, and regulator inquiries relating to personal data processed by Cookiedad on your behalf.

At the end of service provision, Cookiedad will delete or return personal data processed on your behalf upon request, unless retention is required or permitted for legal obligations, security, abuse prevention, backups, accounting, support history, or dispute resolution.

15.9 Security Incidents

If Cookiedad becomes aware of a personal data breach affecting personal data processed on your behalf, Cookiedad will notify you without undue delay after confirming the incident and will provide information reasonably available to help you meet your obligations.

15.10 Audits

Cookiedad will make available reasonable information needed to demonstrate compliance with this DPA. Direct infrastructure audits are not permitted unless required by law and must be replaced where possible by documentation, security summaries, third-party reports, written responses, or equivalent measures that protect other customers and service security.

16. Service Availability and Changes

We aim to provide reliable Services, but we do not guarantee uninterrupted, error-free, or permanently available access. Cloud features may be affected by maintenance, hosting providers, rate limits, third-party services, customer site configuration, firewalls, hosting restrictions, WordPress conflicts, or internet conditions.

We may modify, add, remove, suspend, or discontinue features where reasonably necessary for security, legal compliance, performance, service improvement, provider changes, or commercial reasons. Where a material change negatively affects paid users, we will try to provide reasonable notice.

17. Updates

You are responsible for keeping WordPress, Cookiedad, themes, plugins, and server software updated. We may provide updates to fix bugs, improve security, maintain compatibility, or change features.

Failure to install updates may cause features to stop working or may create security, compatibility, or compliance risks.

18. Intellectual Property and Branding

Cookiedad owns or licenses the Services, website, documentation, cloud platform, trademarks, logos, non-GPL content, and related intellectual property.

You may not use Cookiedad trademarks, logos, trade dress, or branding in a way that suggests sponsorship, endorsement, partnership, or affiliation without written permission.

Third-party names such as WordPress, WooCommerce, Google, Google Cloud, YouTube, Vimeo, Dailymotion, IPinfo, and Freemius are owned by their respective owners. References are for identification and interoperability only.

19. Disclaimers

To the fullest extent permitted by law, the Services are provided "as is" and "as available" without warranties of any kind, whether express, implied, statutory, or otherwise.

We disclaim warranties of merchantability, fitness for a particular purpose, non-infringement, uninterrupted operation, error-free operation, legal compliance, regulatory acceptance, accuracy of scan results, completeness of cookie detection, and correctness of generated legal documents.

Some laws do not allow certain disclaimers, so some disclaimers may not apply to you.

20. Limitation of Liability

To the fullest extent permitted by law, Cookiedad will not be liable for indirect, incidental, special, consequential, exemplary, punitive, or loss-of-profit damages; loss of revenue; loss of business; loss of goodwill; loss of data; regulatory fines; penalties; legal fees; or claims arising from your configuration, publication decisions, legal compliance choices, third-party services, hosting environment, or use of the Services.

To the fullest extent permitted by law, Cookiedad's total aggregate liability for all claims relating to the Services will not exceed the amount you paid to Cookiedad or Freemius for Cookiedad during the 12 months before the event giving rise to liability, or EUR 100 if you used only free Services.

Nothing in these Terms limits liability that cannot legally be limited, including liability for intentional misconduct, gross negligence where not limitable, death or personal injury caused by negligence, or mandatory consumer rights.

21. Indemnity

If you use the Services for a business, agency, client, or organization, you agree to indemnify and hold Cookiedad harmless from claims, damages, liabilities, costs, and expenses arising from:

• your websites, Customer Content, configurations, or legal notices;
• your unauthorized scanning or unlawful processing;
• your breach of these Terms;
• your violation of law or third-party rights;
• your use of third-party services or customer data.

This indemnity does not apply where prohibited by consumer protection law.

22. Termination

You may stop using the Services at any time. You may uninstall the plugin, cancel subscriptions through Freemius, or request account-related assistance.

We may terminate or suspend access to the Services for material breach, non-payment, security risk, abuse, legal requirement, or discontinued services.

Sections that by their nature should survive termination will survive, including payment obligations, intellectual property, privacy and data processing terms, disclaimers, liability limits, indemnity, governing law, and dispute provisions.

23. Governing Law, Jurisdiction, and Disputes

These Terms are governed by the laws of Italy, excluding conflict-of-law rules, unless mandatory consumer law gives you additional rights.

For business users, professionals, agencies, and non-consumer customers, the courts of AGRIGENTO, ITALY have exclusive jurisdiction.

For consumers, mandatory jurisdiction and consumer protection rules of the consumer's country of residence may apply.

The former European Commission Online Dispute Resolution platform was discontinued under Regulation (EU) 2024/3228 and ceased operation on July 20, 2025. We therefore do not include the former ODR platform as an active dispute channel. If mandatory ADR rules apply, they remain unaffected.

Before starting a formal dispute, please contact support@cookiedad.net or info@cookiedad.net so we can try to resolve the issue.

24. Changes to These Terms

We may update these Terms from time to time. The "Last updated" date shows when they were last changed.

If changes are material, we will take reasonable steps to notify customers, such as posting notice on the website, in the plugin, by email, or through account channels.

Continued use of the Services after updated Terms become effective means you accept the updated Terms, unless applicable law requires a different process.

25. Contact

Cookiedad

Vincenzo Greco

Via Lacco Ameno 23/A

GRCVCN77R15A089W

Support: support@cookiedad.net

Legal and privacy: info@cookiedad.net