Privacy Policy
ReCreatingAnew (RCA)
Sidney, Maine, USA
contact:
https://recreatinganew.com
Effective Date: May 1, 2026
Last Updated: May 1, 2026
1. Introduction
ReCreatingAnew ("RCA," "we," "us," or "our") is a software development operation based in Sidney, Maine, USA. We develop and distribute open-source and commercial Joomla extensions. This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and your rights regarding that information.
By visiting recreatinganew.com, showcase.recreatinganew.com, or any related RCA subdomain, or by purchasing or downloading any RCA extension, you agree to the practices described in this policy.
2. Information We Collect
2.1 Information You Provide Directly
- Purchase information: name, email address, and billing details submitted when purchasing a Pro extension via our store. Payment card data is processed entirely by our payment processor (Stripe or equivalent); RCA never stores raw card numbers.
- License registration: domain name(s) you register against a Pro license key.
- Support communications: any information you share when contacting us via email or GitHub Issues, including your Joomla version, server environment, error logs, and any other details you choose to provide.
- Account credentials: if you create an account on recreatinganew.com, your chosen username, email address, and hashed password.
2.2 Information Collected Automatically
- License validation requests: when an RCA Pro extension checks for a valid license, it transmits your registered domain name and license key token to our license server. We log these requests with timestamps.
- Update server requests: when Joomla checks for extension updates, it contacts our update feed URLs. These requests may include your Joomla version, PHP version, and IP address in standard HTTP request headers. We do not log this data beyond standard web server access logs (retained 30 days).
- Web server logs: IP address, browser user agent, referring URL, pages visited, and timestamps. Retained for 30 days for security and debugging purposes.
- Cookies: see our Cookie Policy for full details.
2.3 Information We Do Not Collect
- We do not collect data from your Joomla site's content, users, or database.
- We do not install tracking code, analytics beacons, or call-home scripts in free (GPL) extensions.
- Pro extensions perform only license validation and update checks — no behavioral telemetry, no content scraping.
- We do not collect information about minors. Our services are not directed to persons under 18.
3. How We Use Your Information
Purpose and Legal Basis (GDPR)
- Fulfill your purchase and deliver license keys Contract performance
- Validate Pro licenses against registered domains Contract performance
- Deliver extension updates via Joomla's update server Contract performance
- Respond to support requests Legitimate interest
- Detect and prevent fraud or abuse Legitimate interest
- Comply with legal obligations (tax records, law enforcement requests) Legal obligation
- Improve our extensions based on aggregated, anonymized data Legitimate interest
- Send transactional emails (purchase receipts, license expiry notices) Contract performance
- We do not use your information for advertising, behavioral profiling, or sale to third parties.
4. How We Share Your Information
We share personal data only in the following limited circumstances:
- Payment processors: Stripe (or our current payment processor) receives billing information necessary to process your transaction. They operate under their own privacy policies and are PCI-DSS compliant.
- Hosting infrastructure: our web hosting provider has incidental access to server logs and database backups as part of providing hosting services. They are contractually bound to confidentiality.
- Legal compliance: we may disclose information when required by law, court order, or valid legal process. See our Law Enforcement Policy for details.
- Business transfer: in the unlikely event RCA is acquired or its assets are transferred, personal data may be included in that transfer. We will provide notice before any such transfer and give you the opportunity to request deletion.
We do not sell, rent, or trade personal information to any third party.
5. Data Retention
Data Type Retention Period
Purchase records and license keys 7 years (tax/accounting requirements)
License validation logs 12 months
Support communications 3 years from last contact
Web server access logs 30 days
Deleted account data 30 days after deletion request, then purged
6. Your Rights
Depending on your location, you may have the following rights:
- Access: request a copy of personal data we hold about you.
- Correction: request correction of inaccurate data.
- Deletion: request deletion of your personal data, subject to our legal retention obligations.
- Data portability: receive your data in a machine-readable format.
- Withdraw consent: where processing is based on consent, withdraw it at any time.
- Opt out of sale: we do not sell personal data, so this right does not apply, but we acknowledge it for CCPA compliance.
- Non-discrimination: exercising your privacy rights will not affect your access to our extensions or services.
Residents of the European Economic Area (EEA) have rights under the GDPR including the right to lodge a complaint with your local data protection authority.
Residents of California have rights under the CCPA/CPRA. To exercise any right, contact us at
7. Security
We use industry-standard security measures including:
- HTTPS/TLS encryption for all web traffic
- Hashed and salted passwords (never stored in plain text)
- License tokens stored as irreversible hashes
- Access to production systems restricted to authorized personnel only
- Regular backups with restricted access
No system is perfectly secure. If you discover a security vulnerability, please disclose it responsibly to
8. International Transfers
RCA is based in the United States. If you are located outside the US, your information will be transferred to and processed in the US. By using our services, you acknowledge this transfer. We apply appropriate safeguards consistent with applicable law.
9. Third-Party Links
Our website may link to third-party sites (e.g., Joomla.org, GitHub, payment processors). This policy does not cover those sites. We encourage you to review their privacy policies independently.
10. Changes to This Policy
We may update this policy as our practices change or laws require. We will post the updated policy at recreatinganew.com/privacy-policy with a revised "Last Updated" date. Continued use of our services after the update constitutes acceptance.
11. Contact
For privacy inquiries, data requests, or to exercise your rights:
ReCreatingAnew
Sidney, Maine, USA
Email:
Subject line: "Privacy Request"