Privacy Policy
Effective date: August 20, 2026 · Last updated: August 20, 2026
Two things are worth saying before the detail. This website sets no cookies, runs no analytics, and makes no third-party requests — the live demonstration on the home page measures your reading entirely inside your own browser and sends nothing. And the measurements the plugin takes on your site never reach us: they are written to your own database and stay there.
1. Who we are
Nishihata Engineering Co., Ltd. (有限会社西畑エンジニアリング), operating its web division as One Craft, is the data controller for the personal data described in this policy.
Email: contact-web@onecraft-ne.jp
Postal address: 61 Takayacho Asahi, Konan-shi, Aichi-ken 483-8065, Japan
2. What this policy covers
This policy explains what personal data we collect when you:
- Visit blockinsights-wp.com
- Buy a licence and hold an account
- Run the Block Insights plugin on your own site (licensing traffic only — see section 3.3)
- Contact us for support
It does not cover:
- The measurements the plugin takes on your website. Those describe your visitors, are stored only in your database, and are never transmitted to us. For that data you are the controller — see section 9.
- Third-party websites linked from this site.
3. What personal data we collect
3.1 When you visit this website
No cookies. No analytics. No fonts, scripts, or images loaded from anyone else's servers. Nothing about your visit is sent anywhere by the page itself, including the live demonstration panel, which runs and discards its counters inside your browser.
Our hosting provider keeps standard server access logs (IP address, timestamp, requested URL, user agent) for security and troubleshooting. We do not use those logs to build profiles or to track you across sites.
3.2 When you create an account or purchase
- Name and email address
- Billing details — handled by Freemius, our payment processor and merchant of record. We never see or store your full card details.
- The website URL where you activate the licence, and how many activations you have used
3.3 When you run the plugin
The plugin contacts the licensing service (Freemius) to activate your licence key, to check that it is still valid, and to look for updates. Those requests carry:
- Your site's homepage URL
- The plugin version and the licensing SDK version
- The licence key and the account email associated with it
The licensing SDK is able to send two further things — a list of the plugins and themes installed on your site, and an environment report (WordPress and PHP versions, site language and title). Both are switched off by default in Block Insights.
The plugin does not transmit your content, your posts, your users, your visitors, or any measurement data. There is no analytics endpoint on our side to receive it.
3.4 When you contact support
Your email address, the contents of your message, and anything you choose to attach (for example a screenshot or a debug log). Please redact anything sensitive before sending it.
4. Why we use your data
| Purpose | Legal basis (GDPR) |
|---|---|
| Selling and delivering the licence, updates and support | Performance of a contract |
| Enforcing per-site activation limits | Legitimate interests (protecting our product) |
| Server logs, security and abuse prevention | Legitimate interests |
| Accounting and tax records | Legal obligation |
5. Who we share your data with
| Sub-processor | What they handle | Where |
|---|---|---|
| Freemius, Inc. | Checkout, payments, licensing, update delivery | United States |
| Our hosting provider | Serving this website; server access logs | Japan |
| Our email provider | Support correspondence | Japan |
We do not sell personal data, and we do not share it for advertising.
6. International data transfers
We are based in Japan. Freemius processes payment and licensing data in the United States. Where personal data of EEA or UK residents is transferred outside those areas, the transfer relies on the processor's standard contractual clauses or an equivalent safeguard.
7. How long we keep your data
- Account and licence records — for as long as the account exists, then as required for accounting and tax purposes
- Purchase and invoice records — as required by Japanese tax law
- Support correspondence — up to 3 years
- Server access logs — short-term, per our hosting provider's retention settings
8. Your rights
Subject to your local law (including the GDPR and Japan's Act on the Protection of Personal Information), you may request access to your personal data, correction, deletion, restriction of processing, portability, or object to processing based on legitimate interests. You may also withdraw consent where processing relies on it.
Write to contact-web@onecraft-ne.jp. We answer within 30 days. If you are in the EEA or UK you also have the right to complain to your local supervisory authority.
9. Your visitors' data — and why this section is short
Block Insights was built so that this section could stay short.
On your site, the plugin records, per block and per day:
- Whether the block came into view
- How long it was on screen, in milliseconds
- How many clicks happened inside it
- A device class: desktop, tablet or mobile, derived from viewport width
It does not record:
- Cookies or any browser storage — none are used
- Any visitor identifier; unique visitors are not counted and sessions are not stitched together
- IP addresses. A visitor's IP is hashed in memory only to enforce a per-minute request limit, held for 60 seconds, and never written to the statistics tables
- Page URLs, referrers, user agents, or any personal data
Because no personal data is retained, the plugin adds nothing to WordPress personal-data exports or erasure requests. You remain responsible for deciding what notice, if any, your own site must give its visitors; your obligations depend on where you and your visitors are.
10. Children
The Service is sold to businesses and professionals and is not directed at children under 16. We do not knowingly collect personal data from children.
11. Security
The website is served over HTTPS. Payment card data is handled entirely by Freemius and never touches our systems. Access to account and support data is limited to the people who need it to run the business.
No system is perfectly secure. If you believe you have found a vulnerability in the plugin or this site, email contact-web@onecraft-ne.jp and we will respond promptly.
12. Changes to this policy
We may update this policy. Material changes will be announced at the top of this page. In particular, if we ever add analytics to this website, this policy and the claims made on the home page will be updated before that happens, not after.
13. Contact
Email: contact-web@onecraft-ne.jp
Post: Nishihata Engineering Co., Ltd., 61 Takayacho Asahi, Konan-shi, Aichi-ken 483-8065, Japan