Skip to main content
CartPresets records one piece of personal data: a redemption row. It’s written when an order containing a preset reaches one of the statuses that count towards purchase limits — on hold, processing or completed by default. Nothing is recorded while a customer is browsing, and nothing is recorded when they follow a preset link. The row is written at the order, and it’s removed again if that order leaves the counted statuses, so a cancelled order doesn’t leave a claim behind.

What is recorded, and why

A purchase limit has to recognise the same customer twice, or it can’t count. Alongside the key, the row holds the preset, the order, and when the claim happened. No IP address is recorded, and nothing else about the person is stored. A developer can change how customers are identified with cartpresets_redemption_customer_key — see the hooks reference.

Export Personal Data

WordPress’s own Tools → Export Personal Data screen lists CartPresets among its sources. An export returns every preset that address claimed, under the heading Preset claims: An address answers for both keys it can have. Somebody who bought once as a guest and later opened an account with the same address is one person, whatever the table says, so you get back the guest rows and the account rows.

Erase Personal Data

Tools → Erase Personal Data anonymises the claim rather than deleting it. The customer key is replaced with a value derived from nothing about them. WordPress reports the rows as retained, with a message explaining why.
A redemption row says two things at once: who claimed a preset, and that the preset was claimed. The first is personal data. The second is stock.
Deleting the row would give a limited run its slot back. A preset capped at fifty could sell a fifty-first, because the record of one sale had gone. One customer exercising their rights would quietly change what another customer can buy. Anonymising keeps the count honest and leaves nothing that identifies anyone. After an erasure:
  • The address is gone from the plugin’s tables.
  • The claim still counts against the preset’s total limit.
  • The person can claim that preset again, because nothing links the old claim to them. That’s the right result for a customer who has been forgotten.

What the tools do not touch

Order line item meta stays. Every preset order line carries the preset’s ID and its name as it was at the time. That’s order history, not personal data: it names a preset, not a person. See Order line item meta. WooCommerce’s own exporters and erasers still handle the order itself, the customer record and any downloads, just as they always do.

Nothing on your storefront

Both handlers register in wp-admin only. A shopper browsing your store never loads them, and the privacy tools add nothing to a front-end request.

Uninstalling

Erasing a customer isn’t the same as removing the tables. What an uninstall deletes is a separate, opt-in decision — see Data and uninstall.