"Cookie Settings" Link That Reopens the Consent Banner
Adds a [cookie_settings_link] shortcode that lets visitors change their cookie choice at any time: it clears the stored choice and reloads the page so the consent banner shows again.
Snippet Library
Privacy & Cookies snippets for WordPress
Snippets for privacy and cookies: load tracking only after consent, remove IP addresses, tidy personal data and add privacy notices. For site owners working toward GDPR and similar privacy rules.
"How We Use Your Data" Box at WooCommerce Checkout
Shows a short, plain-language summary above the checkout form explaining what order data you collect, why, and how long you keep it, with a link to your full privacy policy.
Anonymize the Comments of Deleted Users
When a user account is deleted, keeps their comments but replaces the name with "Former member" and removes the email address, website and IP address stored with them.
Delete Comments Left Unmoderated for 90 Days
Once a day, permanently deletes comments that have been waiting in the moderation queue for more than 90 days, along with the names, emails and IP addresses they contain.
Delete Spam Comments Older Than 30 Days
Permanently removes comments marked as spam once they are older than 30 days, so spammers' names, emails and IP addresses do not pile up in your database.
Don't Keep Full IP Addresses in Login Sessions
Shortens the IP address and drops the browser details WordPress stores with every login session, so session records no longer hold full personal data.
Don't Send Guest Commenters' Emails to Gravatar
Shows a built-in placeholder avatar for comments from visitors without an account, so their hashed email address is never sent to Gravatar, while registered users keep their Gravatar picture.
Don't Store Commenters' Browser Details
Stops WordPress from saving each commenter's browser user agent string with their comment, which is rarely needed and counts as personal data.
Expire Personal Data Export Downloads After 24 Hours
Shortens how long the download link and ZIP file of a personal data export stay available, from WordPress's default of three days to one day.
Hide Commenter Email Addresses From Authors and Contributors
Hides commenters' email addresses in the comment lists of the dashboard for users who are not moderators, so authors can reply to comments without seeing readers' personal email addresses.
Never Send the Referrer From Checkout and Account Pages
Sends a strict no-referrer policy on the WooCommerce checkout, order received and account pages, so order keys and other private URL details are never passed to third-party scripts or sites linked from there.
Pending Privacy Requests Badge in the Admin Menu
Shows a count bubble next to Tools and the Export and Erase Personal Data menu items when confirmed privacy requests are waiting for you to process them.
Personal Data Request Form Shortcode
Adds a [privacy_request_form] shortcode where visitors can ask for a copy of their personal data or for its deletion. Requests go into WordPress's own privacy tools and the visitor confirms by email.
Privacy Note Above the Easy Digital Downloads Checkout
Adds a short note above the Easy Digital Downloads purchase form explaining which details are collected for the order and linking to your privacy policy.
Remember Commenters' Details for 30 Days Instead of a Year
Shortens how long the cookies that remember a commenter's name, email and website last, from WordPress's default of one year to 30 days.
Remove Ad Click IDs From Links in Your Content
Strips tracking parameters such as fbclid, gclid, msclkid and Mailchimp or HubSpot IDs from links in your posts (often pasted in by accident), so you do not pass your visitors' ad tracking along to other sites.
Remove Completed Privacy Requests After 90 Days
Deletes finished export and erasure requests (and failed ones) from Tools > Export/Erase Personal Data once they are 90 days old, since the request records themselves contain email addresses.
Remove IP Addresses From Comment Notification Emails
Strips commenters' IP addresses and host names from the new comment and moderation emails WordPress sends to authors and administrators, so personal data does not pile up in inboxes.
Shorter WooCommerce Guest Sessions
Makes WooCommerce forget guest shopping sessions (cart contents and entered details) after 24 hours instead of two days, so less customer data sits in the sessions table.
Show Embeds Only After Consent With a Shortcode
Wraps any embed or HTML in [consent_content category="marketing"]...[/consent_content] so it stays hidden behind a short notice until the visitor consents, using the WP Consent API when available.
Stop Browsers Prefetching DNS for Links on Your Pages
Sends the X-DNS-Prefetch-Control header to tell browsers not to look up the domains of every link on your pages in advance, so visitors' DNS providers do not learn which sites you link to before they click.
Store Shortened IP Addresses and No Browser Details on Orders
Shortens the customer IP address saved with each new WooCommerce order and removes the stored browser user agent, keeping order records leaner on personal data.
Store Shortened IP Addresses for Contact Form 7 Submissions
Shortens the visitor IP address that Contact Form 7 records with each submission (used in mail tags and by Flamingo and spam filters), so a full address is never kept.
Third-Party Requests Inspector in the Admin Bar
Adds an admin bar item on the front of the site that counts the external domains the current page loads files from, and lists them on click, to help you keep your cookie notice and privacy policy accurate.