Privacy policy.

Last updated: 3 August 2026 · Applies to whochangedit.com and the Who Changed It WordPress plugin

1. Who we are

Who Changed It ("we") operates this website, whochangedit.com, and publishes the Who Changed It WordPress plugin. For any privacy question or request, contact us via the details on the contact page.

2. What this website collects

This website is a static informational site. It has no user accounts, no contact forms, no newsletter, no analytics scripts, no advertising, and it sets no cookies. The interactive demo on the homepage runs entirely in your browser on bundled sample data; nothing you click is transmitted or recorded.

Server logs

Like almost every website, our web server keeps standard access logs: the IP address of the request, the time, the URL requested, and the browser's user-agent string. We use these logs solely to keep the site secure and operational (for example, diagnosing errors and identifying abusive traffic). They are not combined with any other data, not used for profiling, and are deleted on routine log rotation. The legal basis under the GDPR is our legitimate interest in operating a secure service (Art. 6(1)(f)).

Fonts

This site loads the IBM Plex typefaces from Google Fonts (fonts.googleapis.com / fonts.gstatic.com). When your browser fetches those files, your IP address is transmitted to Google. Google's privacy policy applies to that request: policies.google.com/privacy.

3. What the plugin collects

The Who Changed It plugin records activity on your own WordPress site, into your own database. We have no access to it. Specifically:

• No telemetry. The plugin does not phone home, does not report usage statistics to us, and does not register your site anywhere. It requires no account.
• Your log is your data. Recorded events (users, IP addresses, changes) are personal data that you control as the site operator. The plugin provides retention windows, IP masking and field redaction so you can meet your own GDPR obligations toward your users.
• AI analysis is not shipped yet. The released plugin makes no external calls whatsoever. When the AI analysis arrives it will be off by default, you will supply your own API key for a provider you choose, and only the log rows relevant to your question will be sent to that provider under your agreement with them. We will not be a party to that transfer and will never see the data.

4. Your rights

If you are in the EU/EEA or a jurisdiction with similar law, you have the right to access, rectify, and erase personal data we hold about you, to restrict or object to processing, and to lodge a complaint with a supervisory authority. Given how little this site collects, in practice the only data we could hold about you is a server log line; contact us and we will handle any request.

5. Changes to this policy

If we ever add features that change what is collected — for example a newsletter or a support form — this policy will be updated before they go live, with the date at the top revised.