Include Custom Comment Fields in Privacy Exports and Erasures
Adds extra comment fields stored as comment meta (such as a phone number or rating) to personal data exports, and removes them during erasure requests.
Snippet Library
Privacy & Cookies snippets for WordPress
Snippets for privacy and cookies: load tracking only after consent, remove IP addresses, tidy personal data and add privacy notices. For site owners working toward GDPR and similar privacy rules.
Include Custom Profile Fields in Personal Data Exports
Adds the custom user fields you list (such as phone or company) to the personal data export file WordPress creates under Tools > Export Personal Data.
Keep WooCommerce Usage Tracking Switched Off
Forces WooCommerce's optional usage tracking off, so no store data is sent to WooCommerce even if someone accepts the prompt by mistake.
Load Social Media Post Embeds Only on Click
Holds back embedded posts from X (Twitter), Instagram, Facebook, TikTok and Threads behind a short notice, so their scripts and trackers only load when the visitor asks for them.
Load Vimeo Videos Only After a Click
Replaces embedded Vimeo players with a lightweight placeholder showing the video title, so nothing is loaded from Vimeo until the visitor clicks to play.
Never Send the Referrer From Checkout and Account Pages
Sends a strict no-referrer policy on the WooCommerce checkout, order received and account pages, so order keys and other private URL details are never passed to third-party scripts or sites linked from there.
Pending Privacy Requests Badge in the Admin Menu
Shows a count bubble next to Tools and the Export and Erase Personal Data menu items when confirmed privacy requests are waiting for you to process them.
Personal Data Request Form Shortcode
Adds a [privacy_request_form] shortcode where visitors can ask for a copy of their personal data or for its deletion. Requests go into WordPress's own privacy tools and the visitor confirms by email.
Privacy Note Above the Easy Digital Downloads Checkout
Adds a short note above the Easy Digital Downloads purchase form explaining which details are collected for the order and linking to your privacy policy.
Privacy Policy Link in the Site Footer
Adds a link to the privacy policy page you set under Settings > Privacy at the bottom of every page, for themes that do not show it.
Remember Commenters' Details for 30 Days Instead of a Year
Shortens how long the cookies that remember a commenter's name, email and website last, from WordPress's default of one year to 30 days.
Remind Administrators to Publish a Privacy Policy
Shows a notice on the dashboard while no published privacy policy page is selected in Settings > Privacy, with a link to set one up.
Remove Ad Click IDs From Links in Your Content
Strips tracking parameters such as fbclid, gclid, msclkid and Mailchimp or HubSpot IDs from links in your posts (often pasted in by accident), so you do not pass your visitors' ad tracking along to other sites.
Remove Completed Privacy Requests After 90 Days
Deletes finished export and erasure requests (and failed ones) from Tools > Export/Erase Personal Data once they are 90 days old, since the request records themselves contain email addresses.
Remove IP Addresses From Comment Notification Emails
Strips commenters' IP addresses and host names from the new comment and moderation emails WordPress sends to authors and administrators, so personal data does not pile up in inboxes.
Remove Location and Camera Data From Uploaded Photos
Strips EXIF metadata such as GPS location, camera serial number and date from JPEG and WebP images when they are uploaded, while keeping them correctly rotated.
Require Age Confirmation When Registering
Adds a required "I am at least 16 years old" checkbox to the WordPress and WooCommerce registration forms, since many privacy laws do not allow children to consent on their own.
Self-Host Google Fonts Used by Your Theme and Plugins
Detects Google Fonts stylesheets loaded on your site, lets you download them to your own server from Tools > Local Google Fonts, and then serves the local copies so visitors' browsers never contact Google.
Shorter WooCommerce Guest Sessions
Makes WooCommerce forget guest shopping sessions (cart contents and entered details) after 24 hours instead of two days, so less customer data sits in the sessions table.
Show Embeds Only After Consent With a Shortcode
Wraps any embed or HTML in [consent_content category="marketing"]...[/consent_content] so it stays hidden behind a short notice until the visitor consents, using the WP Consent API when available.
Site Health Checks for Privacy Settings
Adds Site Health tests that check whether a privacy policy page is published, whether full commenter IP addresses are being stored, and whether the comment cookie consent checkbox is turned on.
Stop Browsers Prefetching DNS for Links on Your Pages
Sends the X-DNS-Prefetch-Control header to tell browsers not to look up the domains of every link on your pages in advance, so visitors' DNS providers do not learn which sites you link to before they click.
Stop Dashboard Browser and PHP Version Lookups
Prevents the dashboard from sending your browser's user agent and your server's PHP version to WordPress.org to decide whether to show upgrade warnings.
Store Only Shortened IP Addresses for Comments
Saves commenters' IP addresses with the last part removed (for example 203.0.113.0), which is still enough for spam checks but no longer identifies a person.