Privacy Policy
Learn how Neksio AccessGuard processes security-related information while respecting administrator privacy and maintaining transparency.
Privacy is a Design Principle
AccessGuard is designed to operate primarily within the WordPress installation. Security information remains under the website owner's control. We do not collect, store, or process any data on external servers unless explicitly configured by the administrator.
All data stays in your WordPress database.
You decide what to store and for how long.
Security Data You Control
AccessGuard processes only the information needed to protect your WordPress site. Each item is explained with purpose, retention, and administrator control.
Login Attempts
Purpose: Detect brute force attacks and unauthorized access.
Retention: Configurable; auto-purge after set days.
Control: Admin can view, delete, or export logs.
Trusted Devices
Purpose: Recognize known devices to reduce friction and flag unknown access.
Retention: Until manually removed or overwritten.
Control: Full device list with remove option.
Security Events
Purpose: Log critical changes (file modifications, permission changes).
Retention: Configurable retention policy.
Control: Filter, search, and delete event logs.
Recovery Codes
Purpose: Backup access in case of 2FA device loss.
Retention: Until used or regenerated.
Control: Generate, view, and revoke codes.
Email Notification Settings
Purpose: Send alerts to administrators.
Retention: Stored in WordPress options.
Control: Enable/disable, change recipients.
Custom Login URL
Purpose: Hide default login page from attackers.
Retention: Stored as option; no personal data.
Control: Set and change at any time.
IP Addresses (optional)
Purpose: Identify malicious traffic and block attackers.
Retention: Configurable; can be disabled entirely.
Control: Toggle IP logging, view and block IPs.
Device & User Info
Purpose: Device fingerprinting for trusted device recognition.
Retention: Until device is removed or session expires.
Control: Full visibility and removal.
Privacy By Exclusion
AccessGuard never collects or transmits the following. Your data remains yours.
No advertising tracking
No analytics beacons
No third-party telemetry
No user profiling
No selling personal data
No hidden background communication
No unnecessary external requests
No cross-site tracking
Where Your Data Lives
Stored Inside WordPress Database
All security logs, device data, and settings are stored in your WordPress database.
Protected by WordPress Permissions
Only administrators with appropriate capabilities can access the data.
Accessible to Administrators
You can view, export, and delete any stored information directly from the dashboard.
Automatically Managed
Retention settings auto-purge old logs. You stay in full control.
Transparent Alerts
Email notifications may contain security alerts, recovery codes, login notifications, and trusted device verification requests. Administrators configure these settings and can disable them at any time.
✓ Email alerts are sent only to addresses configured by the administrator.
✓ No marketing or promotional emails are sent.
✓ You can fully customize which events trigger notifications.
Minimal & Purpose-Bound
AccessGuard uses only the cookies necessary for core security features. No tracking, no analytics, no advertising cookies.
Authentication
Session cookies for logged-in administrators (WordPress native).
Trusted Device Recognition
Optional cookie to remember trusted devices (administrator controlled).
Session Security
Security tokens for login protection and TOTP 2FA.
No Third-Party Cookies
AccessGuard never sets cookies from external domains.
No cookies are used beyond what is essential for WordPress security features.
External Connections
AccessGuard itself does not transmit security information to external services unless explicitly configured by the administrator. Below are the only possible external connections.
WordPress.org
For plugin updates and version checks (standard WordPress behavior).
SMTP Providers
If you configure email notifications via SMTP, your provider may handle email delivery.
Hosting Provider
Your website hosting provider stores your database and files.
Email Infrastructure
Your WordPress site's email system (wp_mail) sends alerts to administrators.
AccessGuard does not transmit data to Neksio servers or any third-party analytics services.
Administrator Command
You have full authority over your security data. Every action is transparent and reversible.
Delete Logs
Remove security logs manually or via retention settings.
Configure Retention
Set auto-purge intervals for logs and event history.
Disable Features
Turn off any module — IP logging, device tracking, email alerts.
Remove Trusted Devices
Revoke device access instantly.
Export Settings
Export configuration and logs for auditing.
Uninstall Plugin
Remove all AccessGuard data completely from your database.
Privacy Supports Security
Security and privacy are not opposing forces. AccessGuard respects administrator privacy while providing powerful protection. Website owners remain in control of their own security information — always.
Privacy Clarified
We're Here to Help
Reach out to our support team for any privacy or security questions.