Privacy Policy

How Д Уеб ЕООД (The Web LTD) processes personal data when you visit divewp.com or contact us about DiveWP.

Last updated: 9 October 2026

1. Who we are

The controller of the personal data processed through divewp.com is Д Уеб ЕООД (The Web LTD), a company registered in Bulgaria:

• UIC (ЕИК): 203963391
• VAT number: BG203963391
• Registered seat: Plovdiv, Bulgaria
• Manager: Oleg Petrov
• Email: info@divewp.com

This policy covers the divewp.com website. It does not cover the DiveWP plugin running on your own WordPress site (see section 10) or third-party websites we link to, such as WordPress.org and Facebook, which have their own policies.

2. Summary

• We do not use analytics, advertising pixels, tag managers or chat widgets on divewp.com.
• The only cookie the site sets is cookieyes-consent, which remembers your cookie choice.
• There is no visitor registration, contact form, comment form or newsletter signup. If you email us, we use your message to reply.
• Some page elements (web fonts, an animation, the cookie banner and an image) load from third-party servers, which receive your IP address.
• The DiveWP plugin analyses your site on your own server. Its optional AI Agent uses the AI provider you configure, not us.

3. What data we process

When you visit the website

With every request, your browser sends technical data: your IP address, browser and device type (user agent), the page requested, the referring page, and the date and time. Our hosting server uses this data to deliver the pages. Our security plugin, Patchstack, inspects requests, including the IP address, to detect and block attacks.

When you open an address that does not exist, our SEO plugin, Rank Math, records the requested address, the referring page, the browser user agent and the time in a 404 log, so we can fix broken links. This log does not store your IP address.

Your cookie choice

Our cookie banner is provided by CookieYes. When you accept, reject or customise cookies, your choice is stored in the cookieyes-consent cookie together with a random consent ID. The banner script is loaded from CookieYes (cdn-cookieyes.com) and also contacts CookieYes's logging service (log.cookieyes.com).

Third-party resources on our pages

• Google Fonts (fonts.googleapis.com and fonts.gstatic.com), on every page, for the Literata and Open Sans typefaces.
• CookieYes (cdn-cookieyes.com and log.cookieyes.com), on every page, for the cookie banner.
• LottieFiles: the animation player script from unpkg.com and the animation file from lottie.host, on the homepage and the error (404) page.
• WordPress.org (ps.w.org): a plugin screenshot shown on the homepage.

When your browser loads these files, the provider receives your IP address and browser details. In our tests, these requests did not set any cookies.

When you email us

If you write to info@divewp.com, we process your email address, your name if you give it, the content of your message, any attachments, and our replies. Our mailbox is hosted on our hosting provider's server.

If you contact us through our Facebook page, Meta's terms and privacy policy apply to that platform.

What we do not collect

The site has no visitor accounts, contact form, comment form, newsletter signup or shop, and we do not use analytics or advertising tools.

4. Purposes and legal bases

• Delivering the website, keeping it secure and fixing broken links (technical data, security and 404 logs): our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).
• Displaying the site with its fonts, animation and images (IP address and browser details received by the providers listed above): our legitimate interest in a consistent, readable design (Art. 6(1)(f) GDPR).
• Recording your cookie choice: our legal obligation to obtain consent for non-essential cookies and to be able to demonstrate it (Art. 6(1)(c) and Art. 7(1) GDPR).
• Answering your emails and support questions: our legitimate interest in replying to you (Art. 6(1)(f) GDPR) or, where your request concerns a contract with us, steps taken at your request (Art. 6(1)(b) GDPR).
• Optional cookies (functional, analytics, performance, advertisement): your consent (Art. 6(1)(a) GDPR). No such cookies are in use today.
• Meeting legal obligations and establishing, exercising or defending legal claims: Art. 6(1)(c) and Art. 6(1)(f) GDPR.

Where we rely on legitimate interests, you can object at any time (see section 8).

5. Who receives your data

We share personal data only with the service providers that run the website, each for the purpose described above:

• JetHost: web and email hosting.
• Patchstack: website security (firewall).
• CookieYes: cookie banner and consent management.
• Google: web fonts (Google Fonts).
• LottieFiles and unpkg: delivery of the homepage and error-page animation.
• WordPress.org: delivery of a plugin screenshot on the homepage.

We may also disclose data to public authorities or courts where the law requires it.

6. International transfers

Our hosting server is located in the European Union (Germany). Some of the providers listed above may process data outside the European Economic Area, for example Google in the United States. Where data is transferred outside the EEA, the transfer relies on a European Commission adequacy decision (such as the EU-US Data Privacy Framework for certified companies) or on standard contractual clauses approved by the Commission. You can ask us for more information about these safeguards.

7. How long we keep data

• The cookieyes-consent cookie: 1 year on your device, unless you delete it or change your choice sooner.
• Emails: as long as needed to handle your request and any follow-up, unless the law requires us to keep them longer or we need them to establish or defend a legal claim.
• The 404 log: until we review and clear it.
• Server, security and consent logs held by our hosting, security and consent providers: according to those providers' retention periods.

8. Your rights

Under the GDPR, you have the right to:

• access the personal data we hold about you and receive a copy (Art. 15);
• have inaccurate data rectified (Art. 16);
• have your data erased (Art. 17);
• restrict the processing (Art. 18);
• receive your data in a structured, machine-readable format (data portability, Art. 20);
• object to processing based on our legitimate interests (Art. 21);
• withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal (Art. 7(3)). For cookies, use the cookie settings button shown on every page;
• not be subject to a decision based solely on automated processing (Art. 22). We make no such decisions.

To exercise a right, email info@divewp.com. We reply within one month. For complex or numerous requests, this period can be extended by two further months, and we will tell you why (Art. 12(3) GDPR). We may ask you to confirm your identity.

You also have the right to lodge a complaint with a supervisory authority. In Bulgaria, this is the Commission for Personal Data Protection (Комисия за защита на личните данни, КЗЛД), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, kzld@cpdp.bg, www.cpdp.bg. You can also complain to the authority in the EU country where you live or work.

9. Cookies

We use CookieYes to ask for your consent. The banner has five categories: Necessary, Functional, Analytics, Performance and Advertisement. Today, only the Necessary category contains a cookie:

• cookieyes-consent (divewp.com, Necessary): stores your consent choices so the banner does not reappear on every page. Duration: 1 year.

The Functional, Analytics, Performance and Advertisement categories contain no cookies. If we add any, we will list them here and in the banner, and they will be set only after you consent.

You can change or withdraw your consent at any time with the cookie settings button shown on every page. You can also delete cookies in your browser settings.

10. The DiveWP plugin

DiveWP is a free WordPress plugin distributed through WordPress.org. Once installed, it runs on your own website, and you are the controller of the data it processes there. The plugin does not send data to divewp.com or to us.

• Standard diagnostics run on your server and do not use an AI provider.
• The AI Agent is opt-in. It sends generation requests through the AI provider you configure in Settings > Connectors, under that provider's privacy terms and charges. Optional public research may query approved WordPress.org documentation.
• DiveWP bounds the evidence it sends and redacts common credentials, salts, database values, authorization data, cookies, sessions, email and IP addresses, paths and URL queries. It does not read passwords, form values, browser storage, network bodies or cross-origin iframe content.
• Raw context snapshots are not saved with conversation history. Conversations are isolated by site and administrator, kept for 90 days by default, and support the WordPress privacy tools.
• The optional site-health email report is built from your site's diagnostics and sent by your own WordPress site to the email address configured in its settings, every 30 days by default.
• The user activity log records administrator actions on your site, with a default retention of 30 days.

Downloads, reviews and the support forum on WordPress.org are governed by WordPress.org's own privacy policy. More detail is in the documentation.

11. Children

divewp.com is intended for website owners and developers and is not directed at children. We do not knowingly process children's personal data. If you believe a child has sent us personal data, contact us and we will delete it.

12. Security

The website is served over HTTPS and protected by a web application firewall. No method of transmission or storage is completely secure, but we take appropriate measures to protect the data we hold.

13. Changes to this policy

We may update this policy when the website, our providers or the law change. The date at the top of this page shows the current version. If a change significantly affects how we use your data, we will point it out on this page.

14. Contact

Д Уеб ЕООД (The Web LTD), Plovdiv, Bulgaria. Email: info@divewp.com. Please also read our Terms of Use.