"How We Use Your Data" Box at WooCommerce Checkout
Shows a short, plain-language summary above the checkout form explaining what order data you collect, why, and how long you keep it, with a link to your full privacy policy.
Snippet Library
Snippets for privacy and cookies: load tracking only after consent, remove IP addresses, tidy personal data and add privacy notices. For site owners working toward GDPR and similar privacy rules.
Shows a short, plain-language summary above the checkout form explaining what order data you collect, why, and how long you keep it, with a link to your full privacy policy.
Includes extra checkout fields you store on orders (such as a VAT number or delivery notes) in the order section of personal data exports.
Once a day, shortens the stored IP address of approved comments older than 60 days, so you keep recent IPs for spam handling without holding personal data forever.
Records each cookie consent choice (accepted or rejected, categories, date and privacy policy version) in its own database table, with only a shortened IP address, and lists the latest records under Tools > Consent Log.
Adds a short note above the WooCommerce order confirmation telling customers how long their order data is kept and how to ask for a copy or deletion.
Permanently deletes contact form messages saved by the Flamingo add-on once they are older than 180 days, so old enquiries and their personal data are not kept forever.
Permanently removes comments marked as spam once they are older than 30 days, so spammers' names, emails and IP addresses do not pile up in your database.
Shortens the IP address and drops the browser details WordPress stores with every login session, so session records no longer hold full personal data.
Stops WordPress from saving each commenter's browser user agent string with their comment, which is rarely needed and counts as personal data.
Deletes the custom user fields you list when you run a personal data erasure request under Tools > Erase Personal Data, so they are not left behind.
Shortens how long the download link and ZIP file of a personal data export stay available, from WordPress's default of three days to one day.
Hides commenters' IP addresses in the Comments screens for editors, moderators and authors, so only administrators can see this personal data.
Adds extra comment fields stored as comment meta (such as a phone number or rating) to personal data exports, and removes them during erasure requests.
Adds the custom user fields you list (such as phone or company) to the personal data export file WordPress creates under Tools > Export Personal Data.
Forces WooCommerce's optional usage tracking off, so no store data is sent to WooCommerce even if someone accepts the prompt by mistake.
Shows a count bubble next to Tools and the Export and Erase Personal Data menu items when confirmed privacy requests are waiting for you to process them.
Adds a [privacy_request_form] shortcode where visitors can ask for a copy of their personal data or for its deletion. Requests go into WordPress's own privacy tools and the visitor confirms by email.
Deletes finished export and erasure requests (and failed ones) from Tools > Export/Erase Personal Data once they are 90 days old, since the request records themselves contain email addresses.
Strips commenters' IP addresses and host names from the new comment and moderation emails WordPress sends to authors and administrators, so personal data does not pile up in inboxes.
Strips EXIF metadata such as GPS location, camera serial number and date from JPEG and WebP images when they are uploaded, while keeping them correctly rotated.
Makes WooCommerce forget guest shopping sessions (cart contents and entered details) after 24 hours instead of two days, so less customer data sits in the sessions table.
Shortens the customer IP address saved with each new WooCommerce order and removes the stored browser user agent, keeping order records leaner on personal data.
Adds Vimeo's dnt=1 setting to every embedded Vimeo video, which stops Vimeo from setting tracking cookies or collecting session data for your visitors.
Shows a dashboard notice to administrators when a personal data request has been waiting for more than 25 days, since GDPR expects an answer within one month.