The information on this page is intended for users of our plugins who are interested in understanding how the GDPR legislation relates to our plugins.
Our plugins act as an intermediary between Instagram and your website, and allow you to choose which type of information you want to include. As such, it is easy to use our plugin in a way which doesn’t display any personal data.
1. Where do our plugin get data from?
Our products make authorized requests to the associated social media platform; Instagram via their API. The social media platform then sends back any publicly available content which their platform has been authorized by their users to share publicly.
2. What data is retrieved by our plugin?
The data which our plugin request originates from the social media platform that the relevant content was posted to. When a user registers with, and posts content to, a social media platform they are agreeing to that platforms terms or service in regards to certain data being accessible to third parties via their developer API. Each user has the ability to restrict access to their data via their account settings on each social media platform. For example, if a Facebook user has their privacy settings set to not allow apps to access certain types of data, then that data can not be retrieved by our plugin, or any other.
3. Is any of the data personal?
Both free and premium version display only the personal information provided by Instagram. These information are the username and the user who create the post. The kind of data our plugins can display varies based on the content showed, anyway any personal data can be excluded from the plugin settings.
4. Does the plugin track any data?
We don’t track any user data in our plugins, but under some circumstances the social media platforms which the plugins request data from may do.
When loading an image or video from a social media platform, a request is made in your web browser to retrieve that file from the social media platform that it’s hosted on. Any request made by your web browser includes your IP address, which can then be seen by the third-party that it’s being requested from. These requests are made to resource-specific domains, such as api.instagram.com, or scontent.cdninstagram.com, with the sole purpose of retrieving content, and do not pass any personal data beyond the IP address of the website user making the request. It’s not possible to use our plugin – or any other plugin which displays content from a social media platform – without making some requests to get the data.
5. Is any data forwarded to third parties?
We do not forward or share any data that we receive from each social media platform with any third parties. We simply retrieve the data from the social media platform and display it on your website. We do not send data to our own servers, or anyone else’s. All data remains on your website.
As mentioned in the section above, the plugins do make some third-party connections to social media APIs (Application Programming Interfaces) and CDNs (Content Delivery Networks) in order to get content, and also have the option to display third-party widgets. When the requests are made to retrieve images or videos then they make the IP address of the person viewing the content/widget accessible to the third-party.
6. How and where is data stored?
When the plugin receives data from a social media platform, it caches this data in your WordPress database (in a dedicated table table). This cache is permanently, and the plugin makes another request every hour to get data from the social media platform and keep the cache updated. Cache data in the db is mandatory to use some plugin feature including moderation.
7. Can users control whether their data is received by and displayed in my feed?
Yes. There are two methods for doing this:
- The user can either change their privacy settings on the corresponding social media platform so that their data is no longer accessible by our plugins
- You can exclude their content by using the moderation tools built into our plugins
8. Do our plugins load any external scripts?
All of our plugins can be used without loading any external scripts.