1. Who We Are
My Book Showroom is a WordPress plugin developed by DMRS Tech. We value our privacy and fully respect yours. This policy describes the data handling practices of the My Book Showroom plugin and the DMRS Tech API it connects to at dmrstech.com.
My Book Showroom is installed and operated by individual site owners (publishers and authors) on their own WordPress installations. DMRS Tech acts as a data processor for the limited data described below; the site owner is the data controller for all content stored in their own WordPress database.
2. What We Do Not Collect
The following data is never transmitted to DMRS Tech servers:
- Book titles, author names, series names, or any book content
- ISBNs, ASINs, or any product identifiers
- Cover images or any media files
- Buy links, affiliate codes, or retailer URLs
- Reader review text or ARC application messages
- WordPress user account names or passwords
- Amazon PA-API credentials
- Any data from visitors to your site who are not explicitly submitting a review or ARC application
3. Free Registration
Using My Book Showroom does not require a license key or an account. If you choose to register your copy to receive a free license key, the plugin sends the following data to dmrstech.com:
- Your email address — used solely to deliver the license key
- Your site domain
- Your plugin, WordPress, and PHP version numbers
Registration is entirely optional. The plugin is fully functional on the FREE tier without registering.
4. License Activation and Validation
If you activate a license key, the plugin communicates with dmrstech.com to verify it. The following data is sent at activation:
- Your license key
- Your site domain and IP address
- Your plugin, WordPress, and PHP version numbers
License keys are stored on our servers using very strong, modern one-way cryptography — the original key value is never retained after it is processed.
After activation, the plugin sends a daily validation ping to confirm the license remains valid. Each ping contains:
- Your site domain
- A timestamp, a rotating one-time nonce, and a cryptographic request signature
- Cryptographic fingerprints of specific local plugin files (to verify authenticity)
- Your plugin, WordPress, and PHP version numbers
Your license key is not included in validation pings after the initial activation. Our request log records the endpoint called, domain, IP address, signature validity, HTTP status code, and request duration. Logs do not contain license key values.
If a validation ping fails due to a network error, the plugin grants a grace period of approximately 25 hours before any PRO features are affected.
5. Usage Statistics
If you opt in, the plugin sends a weekly usage ping to dmrstech.com containing:
- Your plugin, WordPress, and PHP version numbers
- A count of published books on your site
- The layout names you have active (e.g. “grid”, “list”)
- Boolean feature flags (e.g. whether Universes are enabled)
- Aggregate counts of API and import failures
Usage pings never include book titles, author names, ISBNs, cover images, buy links, email addresses, account information of any kind, or any reader information. We use this anonymous data to invest in targeted improvements and create more rich features for the plugin. Nothing more. It is never sold or shared with any third party. You can withdraw consent at any time from the plugin settings.
6. Amazon Associate Credentials
My Book Showroom PRO includes an optional Amazon book-data importer. If you use this feature, you supply your Amazon PA-API Access Key, Secret Key, and Partner Tag.
Please note: After saving these credentials, if your underlying WordPress site configuration is modified (example: someone compromises your site or alters key files), these credentials will become permanently unreadable and will need to be re-entered when your WordPress site is restored.
7. Reader Reviews
My Book Showroom can display a reader review form on book pages. If a visitor submits a review, the following data is collected and stored in your WordPress database:
- Reviewer name and email address
- Star rating (1–5), review title, and review text
- A consent timestamp (the date and time the reviewer ticked the consent checkbox)
- The reviewer’s IP address (stored by WordPress in the standard comments table)
All reviews are held for your moderation before they appear publicly. This data is stored in your WordPress database and is never transmitted to DMRS Tech. As the site owner, you are the data controller for all reader review data.
8. ARC Reviewer Applications
My Book Showroom PRO includes an Advance Review Copy (ARC) management feature. Readers may self-nominate to receive review copies via a signup form on your book pages. The following data is collected:
- Applicant name and email address
- An optional application message
- A one-way fingerprint of the applicant’s IP address (used only for rate limiting — the original IP address cannot be recovered)
This data is stored in your WordPress database. DMRS Tech does not receive any of this information.
If you configure an email service provider (ESP) integration — such as Mailchimp or ConvertKit — and enable ARC list sync, approved reviewers’ names and email addresses are passed to that provider under your own ESP account. The ESP’s own privacy policy governs data handling from that point and is never transmitted to DMRS Tech.
9. Third-Party Services
My Book Showroom may interact with the following third-party services depending on configuration choices made by the site owner:
| Service | When Used | Data Sent |
|---|---|---|
| Google reCAPTCHA v3 | If the site owner enables CAPTCHA on the ARC signup form and selects reCAPTCHA | Applicant token and IP address, verified via google.com/recaptcha/api/siteverify |
| hCaptcha | If the site owner enables CAPTCHA and selects hCaptcha | Applicant token and IP address, verified via api.hcaptcha.com/siteverify |
| Cloudflare Turnstile | If the site owner enables CAPTCHA and selects Turnstile | Applicant token and IP address, verified via challenges.cloudflare.com/turnstile/v0/siteverify |
| Amazon Product Advertising API | If the site owner uses the PRO book-data importer | ASIN or ISBN lookup queries, using credentials stored locally on the site owner’s server |
DMRS Tech does not control, operate, or receive data from any of the above services. Each provider’s own privacy policy applies to data it receives.
10. Data Retention
| Data | Retained By | Retention Period |
|---|---|---|
| Registration email address | DMRS Tech | Until you request deletion or your license is permanently deactivated |
| License activation record (domain, IP, hashed key) | DMRS Tech | Until the license is deactivated for that domain |
| API request log (endpoint, domain, IP, signature result, status) | DMRS Tech | 90 days, rolling |
| Usage statistics ping data (opt-in) | DMRS Tech | 24 months, rolling |
| Reader reviews and ARC applicant data | Site owner’s WordPress database | Under the site owner’s control; DMRS Tech holds no copy |
11. Your Rights
If you have registered your plugin copy and wish to have your email address and associated license records deleted, contact us at support@dmrstech.com. We will process deletion requests within 30 days.
For data held in your own WordPress database (reader reviews, ARC applications, activity logs), you have full control as the site administrator. DMRS Tech holds no copy of this data and cannot act on deletion requests for it.
If you are a reader who submitted a review or ARC application to a My Book Showroom-powered website, please contact the site owner directly. DMRS Tech is not the data controller for that data.
12. Policy Changes
We may update this policy when My Book Showroom adds new features that affect data handling. Material changes will be noted in the plugin’s changelog and the effective date above will be updated. Continuing to use the plugin after a material change constitutes acceptance of the revised policy.
13. Contact
Questions about this privacy policy or requests relating to your personal data:
