Privacy policy

Who we are

This website, cartspan.com, is run by Noverhead Software LLC, Loveland, Ohio, the maker of CartSpan®. Contact: info@cartspan.com, 513-708-1317.

What we collect, and why

• The call-back form: your name, phone number, email address and what you tell us about your store. It’s emailed to us so we can call you back; the website doesn’t keep a copy. We delete these emails after two years.
• Purchases and your account: when you buy or renew, our store (WooCommerce) records your billing details and order. Card payments are handled by Stripe: card numbers go straight to Stripe and never reach our server. If you choose to save your card for next time, Stripe keeps it, and our store keeps only a reference with the card brand, last four digits and expiry date. To prevent fraud, Stripe checks each payment and may run a bot check at checkout, provided by hCaptcha (hCaptcha’s privacy policy). Stripe handles this data under its own privacy policy. We keep orders as long as we need them for your license, support, tax and accounting records.
• Site statistics: Google Analytics 4 counts visits, pages viewed, taps on our phone number and sent call-back forms, with Google signals and ad personalization switched off. Visits from our own site administrators aren’t counted. Google handles this data under its own privacy policy.
• Where a buyer came from: WooCommerce records the page or campaign that led to a purchase, using a cookie, so we can see which pages lead to sales.
• Security: our host (Bluehost) and our security plugin (Wordfence) log basic request data, such as IP address, browser and the page requested, to block attacks. Wordfence keeps these records for up to 30 days, and shares the IP addresses of blocked attackers with the Wordfence security network.
• Backups: copies of the site, including orders and customer accounts, are kept by our backup service, Jetpack (Automattic).

What we don’t do

• We don’t sell or rent your information.
• We don’t share it with advertising networks.

The CartSpan program

The CartSpan program on your computer contacts cartspan.com to check your license (license ID, product, expiry and a Windows computer ID; on activation, the billing email you enter), read announcements, and check for updates (you can turn the update check off). It doesn’t send us your orders, customer list or accounting data. What leaves your PC

Cookies

The main cookies the site sets:

• Where you came from (sbjs_ cookies, WooCommerce): the page or campaign that brought you, so a purchase can be credited to it.
• Your cart (woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_): set when you add something to the cart.
• Your account (wordpress_logged_in_, wordpress_sec_): set when you log in.
• Payment security (__stripe_mid, __stripe_sid, Stripe): set on pages that load Stripe’s payment code, such as the cart and checkout, to prevent fraud.
• Statistics (_ga, _ga_, Google Analytics 4): count visits.

Stripe and hCaptcha may also set cookies on their own domains during checkout, and WordPress and Wordfence set a few technical cookies when you log in. Your browser can block or delete cookies. The cart, checkout and account login need theirs to work.

Your choices

Ask us what we hold about you, or ask us to correct or delete it, at info@cartspan.com. We can’t delete order records that tax and accounting rules require us to keep.

Changes

Effective October 19, 2026. If this policy changes, we’ll update this page and its date.