Privacy policy
Last updated 31 October 2026. Applies to tagnator.com and to every Tagnator product listed below.
This policy is written per product because our products handle data very differently. Most of them store nothing outside the platform they run in. Where we do hold data, we say what it is, why, where, and for how long.
1. Who we are
The controller for any personal data described in this policy is Nathan Jones, trading as Tagnator, a sole trader based in the United Kingdom. Contact: support@tagnator.com. Postal address: The Crosse House, Balls Farm Road, Exeter, EX2 9HZ, United Kingdom.
We apply the UK General Data Protection Regulation and the Data Protection Act 2018. Where customers in the European Union use our products, the EU GDPR applies to them in the same way.
2. This website
tagnator.com is a static site hosted on Cloudflare Pages. It sets no cookies. If you change the light or dark theme, that choice is stored in your browser's local storage and never sent to us. Cloudflare keeps standard server logs, including IP addresses, for security and to run the service; Cloudflare's own privacy policy covers those logs. We do not run advertising or tracking scripts on this site.
3. Markdown Mode for Jira
What it is. An app for Jira Cloud, built on Atlassian Forge, that lets you write descriptions and comments in Markdown.
What we collect. Nothing. The app runs inside Atlassian's infrastructure. Your Markdown and the converted content are saved into your own Jira site as normal issue content. The app makes no calls to any server outside Atlassian and does not use Forge storage for your content. We, as the developer, never receive your issue content, your account details or your site's data.
What Atlassian collects. Atlassian processes your data as your Jira provider and shows us only aggregate install counts and the contact details you choose to share when you contact support or leave a review. Atlassian's data residency commitments for Forge apps apply.
Retention. Content you create stays in your Jira site under your organisation's own retention rules. Uninstalling the app leaves your issues as they are.
4. EAA Ready for WordPress
What it is. A WordPress plugin that scans your own site for accessibility issues and applies fixes.
Free version. Makes no connection to any external service. Scan results, fixes and the accessibility statement you generate are stored in your own WordPress database. We receive nothing.
Pro version. Licences are sold and activated through Freemius, our merchant of record for this product. When you buy or activate a Pro licence, Freemius processes your name, email address, billing details and site URL, and shares with us the name, email, licence status and the site URL the licence is active on, so we can provide the service and support. Freemius's privacy policy governs its processing. The plugin only sends usage diagnostics to Freemius if you opt in during setup, and you can opt out at any time.
Optional AI suggestions. If you enable alt-text suggestions, the plugin sends the images you choose to the AI provider you configure, using your own API key. Nothing is sent until you turn the feature on, and we never see those requests.
Retention. Data in your WordPress database is deleted when you uninstall the plugin, unless you choose to keep it. Licence records at Freemius are kept while your licence is active and for as long as tax law requires afterwards.
5. Fair Price Check for Shopify
What it is. A Shopify app that audits your product pricing against UK and EU consumer law and keeps a price history as evidence.
What we collect. To do its job the app stores, on our servers: your shop's domain; an access token issued by Shopify, encrypted at rest; product and variant identifiers, titles, prices, compare-at prices, quantities, units and category metadata; a daily snapshot of prices per market; the audit findings and the fixes you apply; and the email address Shopify gives us for the store owner, used only for service messages. We do not read orders, customer records or payment data.
Why. To run audits, to show you a 30-day and 12-month price history, and to let you export evidence if a regulator asks. The lawful basis is performance of our contract with you.
Where. Cloudflare Workers and D1, with data held in Cloudflare's network. See service providers.
Retention. Price snapshots are kept for 13 months so that a full year of reference-pricing evidence is available. Everything is deleted within 30 days of you uninstalling the app, and we honour Shopify's mandatory data-erasure requests within the same period.
6. Esc Tools (UK invoice generator and calculators)
What it is. A free invoice generator that runs entirely in your browser.
What we collect. Nothing. Your business details, client details and invoice lines are saved in your browser's local storage on your own device so that they are there next time. They are never uploaded. The PDF is produced by your browser's print function. If we add analytics, it will be Cloudflare's cookieless web analytics, which counts page views without identifying you, and we will say so here.
Affiliate links. The tool may show links to business banking or software products. If you follow one and sign up, the provider may pay us a commission. That is handled by the provider and their affiliate network under their own policies; we receive no personal data about you from it.
7. NIS2 Small-Entity Compliance Kit
What it is. A set of document templates sold as a digital download.
What we collect. The kit is sold through Polar, our merchant of record. Polar collects your name, email address, billing country and payment details, handles VAT, and processes the payment. We never see your card details. Polar shares with us your name, email address, the product bought, the price and the country, so that we can deliver the download, provide support and keep sales records.
Retention. Sales records are kept for six years after the tax year of the sale, as UK tax law requires. Your email is not added to any marketing list.
8. Support emails
If you email us, we keep the correspondence so that we can help you and so that we have a record if the same question comes up again. Support emails are deleted two years after the thread closes. We do not share them with anyone except the service providers that host our email.
9. Service providers and international transfers
| Provider | Used for | Location |
|---|---|---|
| Cloudflare | Website hosting, email routing, the Fair Price Check backend | Global network; EU and US. Covered by the UK International Data Transfer Addendum and EU Standard Contractual Clauses. |
| Atlassian | Hosting and distribution of Markdown Mode for Jira | Per your Atlassian data residency settings |
| Freemius | Licensing and billing for EAA Ready Pro | EU and US |
| Shopify | Distribution and billing for Fair Price Check | Canada, US and EU |
| Polar | Sales and billing for the compliance kit | EU and US |
| Google Workspace or Gmail | Support email | EU and US |
Where data leaves the United Kingdom, we rely on UK adequacy regulations or on the provider's standard contractual clauses with the UK addendum.
10. Your rights
Under UK GDPR you can ask us to: tell you what personal data we hold about you and give you a copy; correct it; delete it; restrict or object to our processing; and give you your data in a portable format. You can also withdraw any consent you gave. Email support@tagnator.com and we will respond within one month.
For data that lives inside Jira, WordPress or Shopify, the platform or your own organisation is usually the controller and the request should go to them; we will point you in the right direction.
If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk, or to your local data protection authority if you are in the EU.
11. Children
Our products are for businesses and are not directed at children. We do not knowingly collect data from anyone under 16.
12. Changes
When we change this policy we update the date at the top. For a change that affects what we collect in a product, we also note it in that product's release notes.
13. Contact
Nathan Jones, trading as Tagnator. Email support@tagnator.com. Postal address: The Crosse House, Balls Farm Road, Exeter, EX2 9HZ, United Kingdom.