Plugin Privacy

Version note: product settings in this guide were checked against the TrueProof 2.4.0 release on September 17, 2026. New-install defaults and upgrade behavior are distinguished below.

This page describes the TrueProof plugin. For processing on wptrueproof.com itself, see the website Privacy Policy.

Free plugin

Supported notification-source records are processed on your WordPress site. During normal use without licence activation, the plugin’s own code makes no third-party requests. Pro licence activation, validation and deactivation send the licence key, home URL and requested action to wptrueproof.com, but not the notification-source records; the service also receives standard network metadata.

Pro licence validation

When Pro is used, the plugin sends only the licence key, site URL and licence action to wptrueproof.com during activation, periodic validation and deactivation. This checks validity and the permitted number of sites. Order, visitor and customer data is not part of the licence request.

REST endpoint

The front-end widget obtains its configured display events from /wp-json/trueproof/v1/events. Like other public front-end content, the returned display fields can be viewed by a visitor’s browser. Configure only fields you are comfortable showing publicly.

Identity display in TrueProof 2.4.0

TrueProof 2.4.0 identity controls: new installations default to Fully anonymous: real events display “Someone” with no city or country. Short name shows a first name and surname initial when available, plus location; a single-field name remains as stored. Full name shows the stored public name and location. Email-shaped name values are suppressed in every mode. Upgrades retain the previous shortened-name or full-name setting until an administrator changes it. Open Settings → TrueProof → Privacy, select Fully anonymous (recommended), save and inspect /wp-json/trueproof/v1/events in a logged-out browser. The setting controls public output; it does not rewrite the underlying WooCommerce order.

What visitors may and may not see

A notification may include a display name, optional city/country, activity and relative time. Email-shaped name values, full postal addresses and order totals are not displayed by the built-in sources.

Your responsibilities

The site owner determines the lawful basis, notices and settings appropriate to their visitors and data. Simulation Mode is for preview data, and a visible “Demo” label is always shown on simulated notifications.