Remove Completed Privacy Requests After 90 Days
Deletes finished export and erasure requests (and failed ones) from Tools > Export/Erase Personal Data once they are 90 days old, since the request records themselves contain email addresses.
Snippet Library
WordPress code snippets, ready to use
3,040 free snippets from the WPIDE team and the community. Copy the code, or add any snippet to your site in one click with WPIDE.
Remove Google Fonts From Elementor's Font Picker
Takes the Google Fonts and Early Access groups out of Elementor's font dropdown, so designers stick to system and self-hosted fonts.
Remove Google Fonts Loaded by Themes and Plugins
Dequeues every stylesheet loaded from Google Fonts and removes the related preconnect hints, for speed and GDPR compliance.
Remove Usernames From CSS Classes
Strips the author and commenter usernames WordPress adds to body and comment classes, closing a quiet way to discover login names.
Remove the Author and Reading Time From Yoast's Slack Previews
Stops Yoast SEO from adding "Written by" and "Est. reading time" labels to link previews in Slack and similar apps.
Remove the Email Field From Comments
Lets visitors comment with just a name, for communities where asking for an email address puts people off.
Require Age Confirmation When Registering
Adds a required "I am at least 16 years old" checkbox to the WordPress and WooCommerce registration forms, since many privacy laws do not allow children to consent on their own.
Required Privacy Consent Checkbox on Comments
Adds a required "I agree to the privacy policy" checkbox to the comment form and rejects comments that are submitted without it, with a link to your privacy page.
Respect Do Not Track in Jetpack Stats
Tells Jetpack Stats not to count visitors whose browser sends the Do Not Track signal, a simple privacy step for sites that want lighter tracking.
Restrict the REST API to Logged-In Users
Returns an authentication error for REST API requests from visitors who are not logged in, with an allowlist for routes your site needs publicly.
Show Comments Only to Logged-In Users
Hides existing comments and the comment form from visitors who are not logged in, including in feeds and the REST API, and invites them to log in.
Show Users Only Their Own Media
Authors and contributors only see files they uploaded in the Media Library and media picker. Editors and administrators still see everything.
Show a Custom Akismet Privacy Notice Under Comments
Turns on the Akismet privacy notice below the comment form and replaces it with your own wording and link to your privacy policy, which many privacy laws expect.
Simple Analytics
Adds the cookie-free Simple Analytics script to your public pages. No tracking ID is needed: data is matched to the domain you added in Simple Analytics.
Simple Share Buttons After Posts
Adds lightweight share links for X, Facebook, LinkedIn, WhatsApp and email at the end of each post, with no third-party scripts or tracking.
Site Health Checks for Privacy Settings
Adds Site Health tests that check whether a privacy policy page is published, whether full commenter IP addresses are being stored, and whether the comment cookie consent checkbox is turned on.
Stop "Data Request Confirmed" Emails to the Admin
Stops WordPress emailing the site admin each time a user confirms a personal data export or erasure request; you can still see requests under Tools.
Stop Beaver Builder From Loading Google Fonts
Prevents Beaver Builder modules from requesting fonts from Google, for privacy (GDPR) and faster pages.
Stop Bricks From Loading Google Fonts
Turns on Bricks' "Disable Google Fonts" setting from code, so neither the builder nor the front end requests fonts from Google.
Stop Browsers Prefetching DNS for Links on Your Pages
Sends the X-DNS-Prefetch-Control header to tell browsers not to look up the domains of every link on your pages in advance, so visitors' DNS providers do not learn which sites you link to before they click.
Stop Divi From Loading Google Fonts
Turns off Divi's Google Fonts option and removes the default Open Sans stylesheet, so no font requests go to Google from your Divi site.
Stop Gravity Forms Storing Visitors' IP Addresses
Saves Gravity Forms entries without the visitor's IP address, which helps with privacy rules when you have no need to keep it.
Stop Saving Commenter Details in Cookies
Stops WordPress from remembering commenters' name, email and website in cookies, and removes the related consent checkbox.
Tell Visitors When the Privacy Policy Changes
Shows a small dismissible notice linking to your privacy policy whenever the policy page has been updated since the visitor last dismissed it. Logged-in users' choice is saved to their profile.