Add Custom Order Fields to WooCommerce Privacy Exports
Includes extra checkout fields you store on orders (such as a VAT number or delivery notes) in the order section of personal data exports.
Snippet Library
Privacy & Cookies snippets for WordPress
Snippets for privacy and cookies: load tracking only after consent, remove IP addresses, tidy personal data and add privacy notices. For site owners working toward GDPR and similar privacy rules.
Add Your Own Section to the Privacy Policy Guide
Adds a suggested paragraph about your custom code (such as analytics, embeds or contact forms) to the Privacy Policy Guide under Settings > Privacy, ready to copy into your policy.
Anonymize the Comments of Deleted Users
When a user account is deleted, keeps their comments but replaces the name with "Former member" and removes the email address, website and IP address stored with them.
Consent Record Log With Shortened IP Addresses
Records each cookie consent choice (accepted or rejected, categories, date and privacy policy version) in its own database table, with only a shortened IP address, and lists the latest records under Tools > Consent Log.
Don't Store Commenters' Browser Details
Stops WordPress from saving each commenter's browser user agent string with their comment, which is rarely needed and counts as personal data.
Erase Custom Profile Fields on Erasure Requests
Deletes the custom user fields you list when you run a personal data erasure request under Tools > Erase Personal Data, so they are not left behind.
Expire Personal Data Export Downloads After 24 Hours
Shortens how long the download link and ZIP file of a personal data export stay available, from WordPress's default of three days to one day.
Hold Tracking Scripts Until the Visitor Consents
Turns the scripts you list by handle into inactive placeholders and only runs them after the visitor gives consent, through the WP Consent API when a consent plugin provides it or the simple wpide_consent cookie otherwise.
Include Custom Comment Fields in Privacy Exports and Erasures
Adds extra comment fields stored as comment meta (such as a phone number or rating) to personal data exports, and removes them during erasure requests.
Include Custom Profile Fields in Personal Data Exports
Adds the custom user fields you list (such as phone or company) to the personal data export file WordPress creates under Tools > Export Personal Data.
Load Social Media Post Embeds Only on Click
Holds back embedded posts from X (Twitter), Instagram, Facebook, TikTok and Threads behind a short notice, so their scripts and trackers only load when the visitor asks for them.
Load Vimeo Videos Only After a Click
Replaces embedded Vimeo players with a lightweight placeholder showing the video title, so nothing is loaded from Vimeo until the visitor clicks to play.
Pending Privacy Requests Badge in the Admin Menu
Shows a count bubble next to Tools and the Export and Erase Personal Data menu items when confirmed privacy requests are waiting for you to process them.
Personal Data Request Form Shortcode
Adds a [privacy_request_form] shortcode where visitors can ask for a copy of their personal data or for its deletion. Requests go into WordPress's own privacy tools and the visitor confirms by email.
Remind Administrators to Publish a Privacy Policy
Shows a notice on the dashboard while no published privacy policy page is selected in Settings > Privacy, with a link to set one up.
Remove Completed Privacy Requests After 90 Days
Deletes finished export and erasure requests (and failed ones) from Tools > Export/Erase Personal Data once they are 90 days old, since the request records themselves contain email addresses.
Require Age Confirmation When Registering
Adds a required "I am at least 16 years old" checkbox to the WordPress and WooCommerce registration forms, since many privacy laws do not allow children to consent on their own.
Self-Host Google Fonts Used by Your Theme and Plugins
Detects Google Fonts stylesheets loaded on your site, lets you download them to your own server from Tools > Local Google Fonts, and then serves the local copies so visitors' browsers never contact Google.
Site Health Checks for Privacy Settings
Adds Site Health tests that check whether a privacy policy page is published, whether full commenter IP addresses are being stored, and whether the comment cookie consent checkbox is turned on.
Store Only Shortened IP Addresses for Comments
Saves commenters' IP addresses with the last part removed (for example 203.0.113.0), which is still enough for spam checks but no longer identifies a person.
Store Shortened IP Addresses and No Browser Details on Orders
Shortens the customer IP address saved with each new WooCommerce order and removes the stored browser user agent, keeping order records leaner on personal data.
Store Shortened IP Addresses for Contact Form 7 Submissions
Shortens the visitor IP address that Contact Form 7 records with each submission (used in mail tags and by Flamingo and spam filters), so a full address is never kept.
Store Shortened IP Addresses for Easy Digital Downloads Orders
Shortens the customer IP address that Easy Digital Downloads records with orders and customer logs, so a full address is never stored.
Two-Click Loading for Spotify, SoundCloud and Other Embeds
Replaces iframes from third-party services in your posts with a notice and a "Load" button, with an option to always allow that service on the visitor's device.