Privacy Notice

bottleplugins.com is operated by Bottle Design Lab, 55, Gyeongchung-daero 1127beon-gil, Chowol-eup, Gwangju-si, Gyeonggi-do, Republic of Korea. We are the controller for the personal data we collect about users of this site and our plugins.

For any privacy question, or to exercise the rights below, contact support@bottleplugins.com or reach us on WhatsApp at +82-10-5967-3068.

• Account details — email address, display name, preferred language, and a password hash if you signed up with a password. Used to create and run your account, and to sign you in.
• Google account identifier — if you sign in with Google, we receive your email address and basic profile from Google. Used to identify your account.
• Subscription records — which plugins you subscribe to, status, and renewal dates. Used to give you access to what you paid for.
• Licence and device records — an anonymous device identifier for each machine you activate a plugin on. Used to enforce the device limit on your plan and to prevent licence sharing.
• Support messages and reviews — anything you write to us or publish on the site, including any images you attach. Used to answer you and to display reviews.
• Technical data — IP address and basic request information, processed by our hosting and security providers. Used to keep the service running and to prevent abuse.

We do not collect or store your card details. Payment data is collected by Paddle independently, as its own controller.

• Performance of a contract — running your account, giving you access to plugins you subscribed to, and providing support.
• Legitimate interests — keeping the service secure, preventing fraud and licence abuse, and improving the product.
• Legal obligation — keeping records we are required to keep, such as for tax.
• Consent — where we ask for it, which you can withdraw at any time.

• Paddle — our Merchant of Record. Paddle handles the sale, subscription billing, payments, invoicing and tax compliance, and acts as its own controller for that data. See Paddle’s privacy policy.
• Service providers — Supabase (database, authentication and file storage), Cloudflare (hosting, DNS and security), Resend (transactional email), and Google (sign-in, if you use it).
• Professional advisers and authorities — where required by law, or to establish or defend legal claims.

We do not sell personal data.

Our database and hosting are operated in the United States, and our providers may process data in other countries. Where data leaves your region, we rely on our providers’ standard contractual clauses and equivalent safeguards.

Account, subscription and licence data is kept while your account is open. If you delete your account, we remove your profile, subscription records, reviews, support threads and uploaded images. Records we must keep for legal or tax reasons — including transaction records held by Paddle — are retained for the period the law requires, then deleted.

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable form. You can withdraw consent where we relied on it. You can delete your account yourself at any time from your account page.

Email support@bottleplugins.com and we will respond within one month. If you are in the UK or EEA and are unhappy with our response, you may complain to your local data protection authority.

Data is transmitted over HTTPS and stored with access controls that restrict each account to its own records. Passwords are stored hashed, never in plain text. Administrative access is limited to named accounts.

We use only what the site needs to work: a stored session so you stay signed in, and a saved language preference. We do not use advertising or analytics tracking cookies. You can clear this data at any time in your browser settings, though signing in again will recreate the session.