Privacy policy
Summary. wendfold.com does not use analytics, advertising or tracking. Our servers keep standard technical logs. If you email us, we keep your email so we can answer it. The Wendfold extension stores your club's data in your own Joomla site, and we never receive it.
This policy has two parts:
- This website: what happens when you visit wendfold.com, download Wendfold, or email us.
- Wendfold in your Joomla site: what the extension stores and which outside services it contacts. This part is for site owners who install it.
Who we are: Wendfold is developed by Adan Lozano, an individual based in Texas, USA. He is responsible for this website and decides how its data is used (in EU terms, the "controller"). Contact:
Part 1: This website
Hosting
wendfold.com is a Joomla site that uses the YOOtheme Pro template. It is hosted by GoDaddy in the United States, in a shared hosting account.
Cloudflare
Web requests to wendfold.com pass through Cloudflare, our CDN and proxy, which provides security, caching and HTTPS. To do this, Cloudflare processes your IP address and the details of your request. We use Cloudflare's free plan with its standard security settings. Cloudflare does not set cookies on normal page visits. It may show a security check to traffic it thinks is suspicious, and that check can set a short-lived cookie. Cloudflare also asks browsers to report network errors (for example, a failed connection) to Cloudflare, which uses those reports to keep its network working. We do not use Cloudflare analytics or Cloudflare's tag manager. See Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/
Email to wendfold.com does not pass through Cloudflare. It goes directly to our host.
Server logs
Like most websites, our host records each request in server logs: IP address, date and time, page or file requested, browser and device type (user agent), referring page and response status. We use these logs to keep the site running, fix problems and stop abuse. We keep no log archives; only our host's (GoDaddy's) default short-term server logs. We do not use them to build profiles of visitors.
Wendfold downloads are hosted on GitHub Releases (github.com/wendfold/wendfold). When you download from there, GitHub receives your IP address and browser details under GitHub's own privacy statement: https://docs.github.com/site-policy/privacy-policies/github-general-privacy-statement. When a Joomla site with Wendfold installed checks for updates, that site's server requests /updates/pkg_wendfold.xml and may request /updates/changelog.xml. These requests appear in our logs with the server's IP address and software version. We do not use them to identify site owners.
Cookies
- Joomla sets one session cookie on every visit, even if you do not log in. It has a random name and value, holds no personal details, and is deleted when you close your browser.
- Cloudflare may set a short-lived cookie only if it shows a security check (see above).
- We do not set analytics or advertising cookies.
Our fonts, styles and scripts all load from wendfold.com itself. We do not use analytics, and we do not embed maps or videos. The home page can open our live demo, demo.wendfold.com, in a window on the page, and other pages link to it. The demo is a separate Joomla site that we run on the same hosting and Cloudflare setup. It sets its own Joomla session cookie and keeps the same kind of server logs described here. Nothing you type in the demo is kept beyond its regular reset.
If you email
Social media
We post announcements on X at @Wendfold. This site does not embed X content or load X scripts. If you visit or interact with the account, X's own privacy policy applies.
What we do not do
- No analytics or visitor tracking.
- No advertising.
- No selling or sharing of personal data. The only exceptions are the service providers above, as needed to run the site and mail, or when the law requires it.
- No user accounts for visitors. Downloads do not need registration.
Your choices and rights
You can ask what personal data we hold about you (most likely only support emails), and ask us to correct, delete or export it, or object to how we use it. Email
Why we may use this data (for visitors in the EU and UK)
- Server logs, Cloudflare security and the session cookie: our legitimate interest in running a secure, working website.
- Your emails: to answer the request you sent us (your request, and our legitimate interest in supporting Wendfold).
- Anything the law requires us to keep: legal obligation.
Our providers (GoDaddy, Cloudflare) are in the United States or process data globally, so your data may be handled outside your country. They protect it under their data processing terms, including the EU Standard Contractual Clauses. If you are in the EU or UK, you may also complain to your local data protection authority.
California
wendfold.com is a free, non-commercial project and is below the thresholds of the California Consumer Privacy Act. We do not sell or share personal information, as those terms are defined in that law. You can still use the rights above.
Children
This site is not directed at children under 13 (16 in the EU), and we do not knowingly collect their data.
Part 2: Wendfold in your Joomla site
This part is for site owners who install Wendfold. When you use Wendfold, you are responsible for your members' personal data. Tell your members how you use it in your own site's privacy policy.
Where the data lives
Wendfold stores its data in your Joomla database and in folders on your web server. It does not send member data to wendfold.com or to Adan Lozano. It has no analytics, telemetry or "call home" code. The only request Wendfold makes to wendfold.com is Joomla's normal check for new versions.
What Wendfold stores
Wendfold creates its own database tables, with the prefix #__wendfold_. Names and email addresses come from your existing Joomla user accounts. Wendfold links to those accounts and does not copy them.
| Area | What is stored |
|---|---|
| Member profiles | Link to the Joomla user, preferred name, member number, membership type, member since, renewal date, dues paid status and date, waiver signed status, date and version, Road Captain and Road Crew flags, national verification and sync dates, reminder-sent dates, chapter on file, chapter join date, sponsor, emergency contact name, phone and relationship, shirt size, photo, notes |
| Member photos | Image files in images/wendfold/profiles/ (JPG, PNG, GIF or WebP, up to 2 MB) |
| Motorcycles | Year, make, model, color, nickname, VIN, primary flag, notes |
| Officers | Member, role, term start and end, current flag |
| Dues payments | Member, year, amount paid, payment date, payment method, receipt number, notes. Wendfold does not process payments or store card or bank details. |
| Events | Titles, descriptions, dates and times, locations and addresses, route links, GPX route files (stored in media/com_wendfold/gpx/), ride leaders, capacity, lodging details for trips, and a check-in token |
| RSVPs and attendance | Who RSVP'd to which event and when; who checked in, when, how, and who checked them in |
| Volunteers and ride groups | Volunteer roles and sign-ups; ride group assignments |
| Trip participants | Lodging status, lodging notes, arrival and departure notes, booking date |
| Rides, miles and milestones | Rides logged per member (date, mileage, start and end location), points and miles awarded, milestone awards and when they were acknowledged |
| Sync log | Summaries of roster imports and scheduled task runs: counts, file name, status and a detail log |
| Locations | Venue name, address, map coordinates, image |
| Settings | Club or chapter number, name, city and state; custom terms; whether OpenStreetMap map tiles are on. Renewal reminder timing. |
Wendfold also creates six Joomla user groups: Chapter Member, Chapter Road Captain, Chapter Activities, Chapter Membership, Chapter Officer and Chapter Webmaster.
Fields in bold can be sensitive. Collect only what your club needs.
Roster import (National Sync)
Administrators can upload your national organization's member export (CSV file). Wendfold saves the upload to Joomla's temporary folder (or the server's, if none is set), reads it, and then deletes the temporary file. Matched rows update member profiles and the name and email address of the linked Joomla user account. Phone and address columns are checked but not saved. Each import is recorded in the sync log.
Emails Wendfold sends
Wendfold sends email through your Joomla site's own mail settings. It has no outside email service of its own.
- Renewal reminders to members before their renewal date (if you create that Scheduled Task).
- Day-of event reminders to members who RSVP'd (if you create that Scheduled Task).
- Email Blast messages that an administrator sends.
- An optional notice to the site administrator when a new profile is created (User - Wendfold plugin, off by default).
Included code
These parts ship inside the Wendfold package and load from your own site, not from an outside service:
- Check-in QR codes. Wendfold creates the QR code image on your server with a bundled PHP library (qrcode-generator, MIT license). The check-in link is not sent to any QR service.
- Map code. The map libraries (Leaflet 1.9.4 and leaflet-gpx 1.7.0, BSD-2-Clause) and their marker images ship inside the Wendfold package. They load from your site, not from a CDN.
The map tiles drawn behind event maps are not included. With the default settings they come from OpenStreetMap, which is an outside request (see the table below).
Outside services the extension can contact
Some event-page features connect the visitor's browser to an outside server. That server then receives the visitor's IP address and browser details. With the default settings, the OpenStreetMap request happens as soon as a visitor opens an event page that shows a map.
| Service | When it is contacted | What is sent | Can you turn it off? |
|---|---|---|---|
OpenStreetMap tile servers (tile.openstreetmap.org) | When a visitor opens an event page that shows a map: a GPX route map, or a starting-point marker map (shown only when that location has map coordinates). Only while the OpenStreetMap map tiles option is on. It is on by default. | Visitor IP, browser details, and which map area is viewed. A notice under each map tells visitors this. | Yes. Components → Wendfold → Options → Privacy → OpenStreetMap map tiles (osm_tiles). When it is off, routes are drawn on a blank background, the marker map is not shown, and no tiles are requested. |
Google Maps (maps.google.com), Get Directions link | Only when a visitor clicks Get Directions on an event's starting address | The address, plus the visitor's IP and browser details. Google's own privacy policy and cookies then apply | Not a setting, and not affected by the map tiles option. Nothing is sent unless the visitor clicks. |
Event pages do not embed Google Maps and load no Google content on their own.
Cookies
Wendfold does not set cookies of its own. Joomla's normal session cookie applies.
When a member or user is deleted
When a Joomla user is deleted, the User - Wendfold plugin unpublishes the linked member profile. It does not delete it. Deleting a profile in Wendfold removes the profile record only: the member's dues, RSVPs, check-ins, ride logs, sign-ups, awards and photo stay until an administrator removes them by hand. Site administrators can handle data export and removal requests through Joomla's Privacy component; the Privacy - Wendfold plugin adds Wendfold data to those requests. See Privacy and data.
When you uninstall Wendfold
Uninstalling Wendfold deletes all of its database tables and the data in them: member profiles, dues, events, attendance and ride logs. It also deletes the uploaded GPX route files. Uploaded member photos (in images/wendfold/profiles/) and the images in images/profiles/ and images/locations/ are kept and can be removed by hand. Wendfold's Scheduled Tasks, Wendfold user groups that still have users, and the log file administrator/logs/com_wendfold.php also stay. Back up first: use Akeeba Backup, or export the database from your host's phpMyAdmin. See Uninstall.
Backups
Wendfold data is part of your Joomla database and files, so it is included in your normal site backups. Keep backups secure because they contain member data.
Changes to this policy
If we change this policy, we will update the "last updated" date at the top. Changes that relate to the extension will also be noted in the Changelog.
Contact
Questions about privacy: