Checknaut
Effective date: October 8, 2026
Who we are
Checknaut is made and sold by Abcreative, LLC, a Minnesota limited liability company (“Abcreative”, “we”, “us”). This policy covers two things: this website, and the Checknaut plugin you install on your own WordPress site. They handle data very differently, so each gets its own section. Questions about anything here: support@checknaut.com.
The short version
This website uses Google Fonts and an optional Google Analytics tag configured through Site Kit. The analytics tag is blocked until you allow statistics cookies through our consent banner. Google receives browser requests when its resources load. Purchases and licence activations use Freemius. The plugin runs on your WordPress server; connecting an AI assistant lets information requested through the connector pass to your chosen AI provider.
What this website collects
The website includes Google’s tag (gtag.js), configured through Site Kit for Google Analytics. Google services may receive information about page visits, browser and device details, and network requests. The analytics tag loads only after you allow statistics cookies. You can reject optional cookies or change your choice through the Cookie settings button. What is collected and retained after consent depends on the tag configuration. See Google’s privacy policy for Google’s handling of data.
Our hosting provider also processes requests to serve the website and may keep server logs, including IP addresses, requested URLs and timestamps. This policy does not promise a particular log-retention period.
The contact intake form collects your name, email address, optional website address and question. We use these details to reply and handle support or purchase enquiries. Our hosting and email delivery services may process submitted messages and delivery logs. Please do not submit passwords, connector keys or payment card details. Checkout is handled by Freemius.
The quick-answer widget matches your questions against published documentation and FAQs in your browser. The widget itself does not send your questions to an AI service or save a chat history. Following its intake or checkout links opens those separate services; the Google tag described above remains part of this website.
If you email us at support@checknaut.com, we receive your email address and whatever you write. We use it to answer you and keep the thread for as long as it is useful for support history. Ask us to delete a support thread and we will.
Downloading the free plugin requires no account and no email address.
Purchases and licensing (Freemius)
Paid plans are sold through Freemius, Inc., which acts as our reseller and merchant of record. When you buy a license, your payment details go to Freemius and its payment processors. We never see your card number. Freemius shares with us what we need to run the product: your name, email address, the plan you bought, and your license status. Freemius’s handling of your data is described in the Freemius privacy policy.
Billing, renewals, and refunds are managed through Freemius; refund requests can also come straight to us by email and we will action them with Freemius on your behalf.
What the plugin does on your site
The plugin runs on your own server. Its audits, fixes, scores, snapshots and self-tests execute on your WordPress install, and the results are stored in your own database. Installing the plugin does not grant us access to your site, content or audit results. Information you choose to send us in a support request is handled as support correspondence. The outbound requests it does make, listed below, go to destinations your own site names or that you configure, never to us.
The free plugin contains no licensing code and never contacts us or Freemius. If you enable known-vulnerability lookup (off by default), each Site Health audit sends your WordPress version and eligible plugin/theme folder names to wpvulnerability.net. It does not send installed plugin or theme version numbers, your site address or page content in those lookup requests. The service sees your server’s IP address, as with any web request. Some audit checks cannot be answered from inside your database, so while it audits it makes these requests: the broken-link check fetches the URLs your own pages link to; the mail checks resolve your domain’s DNS records through your server’s own resolver; the Site Health domain-expiry check asks rdap.org for your domain’s public registration record (only the domain name is sent, and the answer is cached for a day); and the plugin-health check asks wordpress.org about the plugins you have installed. If you paste a Hostinger API token, it also asks Hostinger’s API to purge your edge cache after a write, sending your domain name and that token. Every one of these is cached or time-boxed, and reported as unchecked by name when it cannot run.
Checknaut Pro connects to Freemius to validate your license key and check for updates. That request carries your license key, your site URL, and basic environment details (WordPress and plugin versions). Freemius also offers optional usage diagnostics. That sharing is opt-in during activation, does not include your site content, and can be declined or turned off at any time without affecting the product. Pro’s other outbound requests happen only when you use the feature that needs them:
- Screenshots: the screenshot service you choose and configure receives the address of one published page of your site, the width, and the API key you entered.
- Comparing a page with a mock-up: the reference image address you give is downloaded (https only).
- Updates and installs (tested updates and the plugin manager): WordPress.org is asked which updates exist and the packages are downloaded from it, the same way the wp-admin Updates screen does.
- Stock images: Pexels or Pixabay receive your search words and the API key you entered for them.
- The fleet hub, once you add a client site: MCP tool calls to that site’s Checknaut connector, authenticated with the connector token you pasted; an hourly request for its home page to measure uptime; a daily TLS handshake to read its certificate’s expiry; rdap.org lookups for its domain; and the alert emails you set up.
The FAQs answer the common data questions in plain language.
The AI connection
Checknaut’s connector, part of Checknaut Pro, lets you link an AI assistant (for example, Anthropic’s Claude) to your site. That connection only exists if you create it: you authorize it through a secure sign-in on your own site (OAuth 2.1) or with a key you can rotate, and you can revoke it there at any time.
Be clear-eyed about what this means: when your AI assistant reads or edits your site through the connector, your site’s content flows between your server and your AI provider. That flow is governed by your agreement with the AI provider and their privacy policy, not this one. We are not a party to that connection, we cannot see it, and we never receive any of that data. If your site holds content you would not paste into an AI chat, do not point the connector at it.
Cookies
Complianz remembers your consent choice using cookies with names beginning cmplz_, such as cmplz_statistics and cmplz_banner-status. These choices allow the banner to apply your preferences on later visits. Optional Google Analytics cookies, such as _ga and _ga_ followed by a measurement identifier, can distinguish visits after you allow statistics. Use Cookie settings to withdraw that permission; the analytics script is blocked on subsequent page loads. You can also clear existing cookies using your browser settings.
The Motion on/off control stores your preference in this browser’s local storage, where available. It does not identify you or store dashboard-tour or chat history. You can remove this preference by clearing this website’s browser data.
WordPress uses functional cookies for signed-in users. Google services and Freemius checkout may use cookies or similar technologies, depending on their configuration and your browser or consent settings. We do not promise that a visit to this website is cookie-free. Your browser settings can restrict cookies and third-party requests. The plugin’s administrator authentication uses WordPress’s functional mechanisms.
Your rights
Whatever your jurisdiction (GDPR, CCPA, or otherwise), the practical version is the same: email support@checknaut.com and we will tell you what we hold about you (typically: license records from Freemius and any support emails), correct it, or delete it, subject to records we are legally required to keep. For data held by Freemius, we will coordinate with them or you can contact them directly. We do not sell personal information, and we have no advertising relationships to share it with.
Children
Neither this website nor the plugin is directed at children under 16, and we do not knowingly collect their information.
Changes
If this policy changes, the new version is posted here with a new effective date. A change that meaningfully affects license holders will also be announced to the email on the license.
Contact
Abcreative, LLC · support@checknaut.com