"How We Use Your Data" Box at WooCommerce Checkout
Shows a short, plain-language summary above the checkout form explaining what order data you collect, why, and how long you keep it, with a link to your full privacy policy.
Snippet Library
Privacy & Cookies snippets for WordPress
Snippets for privacy and cookies: load tracking only after consent, remove IP addresses, tidy personal data and add privacy notices. For site owners working toward GDPR and similar privacy rules.
Add Custom Order Fields to WooCommerce Privacy Exports
Includes extra checkout fields you store on orders (such as a VAT number or delivery notes) in the order section of personal data exports.
Expire Personal Data Export Downloads After 24 Hours
Shortens how long the download link and ZIP file of a personal data export stay available, from WordPress's default of three days to one day.
Inactive Subscribers Cleanup Page
Adds Users > Inactive Subscribers, listing subscriber accounts older than two years that have never commented, with checkboxes to delete the ones you select after a confirmation.
Include Custom Comment Fields in Privacy Exports and Erasures
Adds extra comment fields stored as comment meta (such as a phone number or rating) to personal data exports, and removes them during erasure requests.
Include Custom Profile Fields in Personal Data Exports
Adds the custom user fields you list (such as phone or company) to the personal data export file WordPress creates under Tools > Export Personal Data.
Load Social Media Post Embeds Only on Click
Holds back embedded posts from X (Twitter), Instagram, Facebook, TikTok and Threads behind a short notice, so their scripts and trackers only load when the visitor asks for them.
Pending Privacy Requests Badge in the Admin Menu
Shows a count bubble next to Tools and the Export and Erase Personal Data menu items when confirmed privacy requests are waiting for you to process them.
Privacy Note Above the Easy Digital Downloads Checkout
Adds a short note above the Easy Digital Downloads purchase form explaining which details are collected for the order and linking to your privacy policy.
Remove Completed Privacy Requests After 90 Days
Deletes finished export and erasure requests (and failed ones) from Tools > Export/Erase Personal Data once they are 90 days old, since the request records themselves contain email addresses.
Remove IP Addresses From Comment Notification Emails
Strips commenters' IP addresses and host names from the new comment and moderation emails WordPress sends to authors and administrators, so personal data does not pile up in inboxes.
Remove Location and Camera Data From Uploaded Photos
Strips EXIF metadata such as GPS location, camera serial number and date from JPEG and WebP images when they are uploaded, while keeping them correctly rotated.
Require Age Confirmation When Registering
Adds a required "I am at least 16 years old" checkbox to the WordPress and WooCommerce registration forms, since many privacy laws do not allow children to consent on their own.
Site Health Checks for Privacy Settings
Adds Site Health tests that check whether a privacy policy page is published, whether full commenter IP addresses are being stored, and whether the comment cookie consent checkbox is turned on.
Stop Browsers Prefetching DNS for Links on Your Pages
Sends the X-DNS-Prefetch-Control header to tell browsers not to look up the domains of every link on your pages in advance, so visitors' DNS providers do not learn which sites you link to before they click.
Store Only Shortened IP Addresses for Comments
Saves commenters' IP addresses with the last part removed (for example 203.0.113.0), which is still enough for spam checks but no longer identifies a person.
Third-Party Requests Inspector in the Admin Bar
Adds an admin bar item on the front of the site that counts the external domains the current page loads files from, and lists them on click, to help you keep your cookie notice and privacy policy accurate.
Warn About Privacy Requests Close to the 30-Day Deadline
Shows a dashboard notice to administrators when a personal data request has been waiting for more than 25 days, since GDPR expects an answer within one month.