Privacy Policy, Terms of Use & Cookie Policy

Zombie Plugins · The afterlife

Zombie Plugins · Effective November 5, 2026 · Last updated November 5, 2026

This document explains how Zombie Plugins handles information, the conditions for using the site, and its use of cookies and similar technologies.

1. Privacy Policy

Who we are and how to contact us

“We,” “us” and “our” refer to Zombie Plugins.

For privacy questions, requests or complaints, contact us about privacy. You do not need to supply plugin details to make a privacy request. Please avoid passwords, sensitive information and unnecessary details about other people.

Information we handle

Public plugin information. The directory contains plugin and developer/vendor names, official links, release information and activity labels. Sources include WordPress.org, official developer information and community reports. Publicly sourced information can still concern identifiable people. Community reports are distinguished from independently verified release facts.
Plugin checks. The server receives a plugin name, slug or URL entered for a lookup and may query WordPress.org or an official developer source. A single-plugin lookup can appear in the public “Recently checked” list as the plugin and check time. That list does not identify the visitor.
Plugin lists. Pasted lists are parsed in the browser. Plugin identifiers needed for lookups are sent to the server; the complete pasted site information is not sent by that checker. The combined results are not added to the public recent-check list.
Corrections and correspondence. A correction request contains the plugin name, website, your email and any optional supporting link or note. It goes into a private review queue. Your email and message are not published as listing facts, and a correction request does not automatically publish a listing or send a developer notice. Privacy correspondence is used to identify relevant records, verify a request where necessary and address it.
Delivery and security. Requests to the website and its providers involve technical information such as IP addresses, requested URLs, browser details and timestamps. We use security checks and request limits to protect the service. Correction-form limits use keyed hashes instead of storing raw IP addresses in that database; this does not mean that our infrastructure providers never process IP addresses.

Analytics

We use Cloudflare Web Analytics to understand aggregate visits, page views, referring sources and page performance. Our code limits the analytics script to eligible public pages, excludes query-bearing URLs and private tools/forms, and excludes EU or unknown geography. It also respects browser Do Not Track and Global Privacy Control signals before loading the script.

Cloudflare describes Web Analytics as cookieless and not based on tracking individual visitors. Loading a remote analytics service still involves network requests and technical processing; “cookieless” does not mean that nothing is processed. Google Search Console is used to review Google search visibility; Google Analytics is not installed in this implementation.

Purposes and providers

We use information to provide plugin checks and source-backed listings, handle corrections and privacy requests, understand site performance, prevent abuse and meet applicable legal obligations. Where EU or UK data-protection law applies, necessary operation, security and correspondence rely on our legitimate interests; processing required by law relies on legal obligations, and processing requiring consent relies on that consent.

Cloudflare provides website delivery, Workers hosting, D1 storage, analytics, Turnstile bot verification and Access for the private staff area. WordPress.org and official developer sites can receive server requests needed for plugin research. Our project mailbox uses NameCrane for direct email correspondence; correction-form reports are stored privately rather than automatically emailed. Providers may process information outside your country. We remain responsible for the processing we arrange and applicable transfer requirements.

We may disclose information when reasonably necessary and legally permitted to meet a legal obligation, protect the service or address a claim. A provider’s own policy does not replace our responsibilities. See Cloudflare’s privacy policy and Turnstile’s privacy addendum.

Retention and security

Public plugin records and the bounded plugin-only recent-check list support the directory and its history. Correction records currently have no automatic time-based deletion schedule. Dismissed corrections may remain until later cleanup; when the bounded queue is full, its oldest dismissed record can be removed. Service-provider retention depends on the service and its configuration. We do not promise that a refresh interval or clearing browser storage deletes records already held elsewhere.

Private review is restricted through sign-in and server-side access checks. We use safeguards appropriate to the service, but no online system can guarantee complete security. This does not remove our legal duties.

Your choices and rights

Depending on applicable law, you may request access, correction, deletion, a portable copy or restriction of processing; object to certain uses; withdraw consent; or opt out of qualifying sale, sharing, targeted advertising or profiling. Listing these rights does not mean that each of those activities occurs on this site. Where the right applies, an objection to direct marketing stops that use.

Use the privacy-request contact. We ask only for information reasonably needed to identify records and verify your identity or an agent’s authority where required. We do not require verification for opt-outs where the law prohibits it. We respond within the applicable deadline, explain a lawful refusal or extension, and provide available appeal or complaint routes. You can also complain to the relevant privacy regulator. We do not unlawfully discriminate against you for exercising your rights.

Please contact us if you believe we hold a child’s information that we should not have. We will investigate and take the steps required by applicable law.

2. Terms of Use

What the site tells you

Zombie Plugins helps people research WordPress plugin release activity. “Alive,” “Quiet,” “Zombie” and “Dead?” are project labels based on the evidence and definitions explained on the Method page. They are not definitive statements about a developer’s conduct, a plugin’s security or compatibility, or why development may have slowed. Some stable plugins need few updates. Missing information or a failed check is not proof of abandonment.

Information can be incomplete or become outdated. Check the dated sources and do your own research before buying, installing, replacing or removing software. If a listing is inaccurate or lacks context, request a correction.

Responsible use and submissions

Use the site for lawful purposes. Do not interfere with security or operation, seek unauthorized access, introduce malicious code, impersonate others or misuse their personal information. Do not submit material you are not entitled to provide.

Private correspondence is not permission to publish it as a testimonial. A submitted concern is not treated as an independently verified release fact. Additional information on an available form explains how that request is handled.

Content and outside services

Rights in protected content remain with the relevant rights holders. Use it as permitted by law or its stated license; obtain permission for other uses. Public-domain material does not become proprietary merely by appearing here. Third-party names and marks do not by themselves establish affiliation or endorsement.

External services have their own operators and terms. Check important information directly with the relevant provider. An embedded service, including a security check, can receive technical information before you follow an external link. Report content, credit or privacy concerns through the privacy contact.

Availability and legal rights

Uninterrupted availability is not guaranteed. We can make necessary maintenance or security changes and address misuse, subject to applicable law and any separate commitments.

Nothing here excludes liability that cannot lawfully be excluded or removes mandatory consumer protections, privacy rights or other legal remedies. These terms do not impose mandatory arbitration or waive access to a court or regulator.

Cookies and similar technologies store or access information on a device. Browser storage, security checks and embedded services can process information without using a traditional cookie.

Theme preferences: the site stores your tube color, bar and Worn choices in local storage under zp-theme. They remain until changed or cleared in your browser.
Security and bot checks: Cloudflare services, including Turnstile and any applicable delivery challenges, process technical signals and may use security-related browser technologies. The private staff area uses Cloudflare Access sign-in/session cookies; that is separate from public browsing.
Analytics: Cloudflare Web Analytics does not use analytics cookies for visitor tracking. The code applies the geography, page and browser-signal exclusions described above.

Browser settings can block or clear cookies and local storage, although doing so can reset preferences or affect security/sign-in functions. Deleting storage on your device does not necessarily delete information already held by a provider.

Where law requires consent, it must be obtained before the relevant technology operates. Continuing to browse is not that consent. A consent exception applies only when its conditions are met; calling a service “analytics” or “functional” does not establish an exception. Consent can be withdrawn for future processing without affecting earlier lawful processing.

For questions about these technologies or your choices, use the privacy contact.

Updates

We update the date when this document changes and provide any additional notice or consent opportunity required for a material change. Changes do not retrospectively remove your rights.