Snippet Library
Snippets for privacy and cookies: load tracking only after consent, remove IP addresses, tidy personal data and add privacy notices. For site owners working toward GDPR and similar privacy rules.
Adds a [do_not_sell_link] shortcode for the opt-out link US state privacy laws such as the CCPA require; clicking it records the visitor's opt-out in a cookie and tells marketing scripts held back by consent snippets not to run.
Includes extra checkout fields you store on orders (such as a VAT number or delivery notes) in the order section of personal data exports.
Once a day, shortens the stored IP address of approved comments older than 60 days, so you keep recent IPs for spam handling without holding personal data forever.
Permanently deletes contact form messages saved by the Flamingo add-on once they are older than 180 days, so old enquiries and their personal data are not kept forever.
Shortens the IP address and drops the browser details WordPress stores with every login session, so session records no longer hold full personal data.
Stops WordPress from saving each commenter's browser user agent string with their comment, which is rarely needed and counts as personal data.
Deletes the custom user fields you list when you run a personal data erasure request under Tools > Erase Personal Data, so they are not left behind.
Shortens how long the download link and ZIP file of a personal data export stay available, from WordPress's default of three days to one day.
Hides commenters' email addresses in the comment lists of the dashboard for users who are not moderators, so authors can reply to comments without seeing readers' personal email addresses.
Hides commenters' IP addresses in the Comments screens for editors, moderators and authors, so only administrators can see this personal data.
Adds extra comment fields stored as comment meta (such as a phone number or rating) to personal data exports, and removes them during erasure requests.
Adds the custom user fields you list (such as phone or company) to the personal data export file WordPress creates under Tools > Export Personal Data.
Shows a count bubble next to Tools and the Export and Erase Personal Data menu items when confirmed privacy requests are waiting for you to process them.
Adds a [privacy_request_form] shortcode where visitors can ask for a copy of their personal data or for its deletion. Requests go into WordPress's own privacy tools and the visitor confirms by email.
Deletes finished export and erasure requests (and failed ones) from Tools > Export/Erase Personal Data once they are 90 days old, since the request records themselves contain email addresses.
Strips commenters' IP addresses and host names from the new comment and moderation emails WordPress sends to authors and administrators, so personal data does not pile up in inboxes.
Saves commenters' IP addresses with the last part removed (for example 203.0.113.0), which is still enough for spam checks but no longer identifies a person.
Shortens the customer IP address saved with each new WooCommerce order and removes the stored browser user agent, keeping order records leaner on personal data.
Shows a dashboard notice to administrators when a personal data request has been waiting for more than 25 days, since GDPR expects an answer within one month.