Privacy & Compliance

AllFeedback is built with privacy at its core. All feedback data stays on your WordPress server — nothing is sent to external services or third-party platforms. You remain the data controller, and your visitors' information never leaves your infrastructure.

How AllFeedback Handles Data

AllFeedback stores everything locally in your WordPress database using three dedicated tables. No external services are involved in collecting, processing, or storing feedback.

What Gets Stored

wp_af_surveys — every survey you build, including questions, settings, styling, and targeting rules

wp_af_responses — every answer a visitor submits, with metadata like submission date, device type, IP data, and consent status

wp_af_survey_sessions — each time a visitor sees or starts a survey, used for analytics like completion and abandonment rates

All data stays in your WordPress database — you can back it up, export it, or delete it with standard WordPress tools.

Consent & GDPR Compliance

AllFeedback includes built-in consent management to help you comply with GDPR and similar regulations.

Requiring Consent

Go to wp-admin → AllFeedback → Settings → Advanced → Privacy

Enable Require Consent

When enabled, a submission is rejected unless the visitor has ticked the consent checkbox — they'll see an error and the response won't be saved. This is a global setting; it can't be toggled per survey. You can also customize the consent text and link your privacy policy from the same screen.

What Consent Records

When a visitor submits, AllFeedback records whether consent was given, stored as consent_given on the response in wp_af_responses — so you can demonstrate that consent was obtained if needed.

IP Addresses & Identity Data

How IP Addresses Are Used and Stored

AllFeedback uses the visitor's IP for two purposes:

Rate limiting — capping submissions at 10 per IP per 5 minutes to curb spam

Duplicate prevention — detecting whether the same visitor already responded

By default, each response stores both:

A non-reversible hash of the IP (HMAC-SHA256, used for the checks above — it can't be reversed to recover the IP), and

The raw IP address, which an admin can view (masked behind a reveal toggle) in the response detail.

If you don't want the raw IP stored, enable Disable User Details (below).

Disabling User Details

Go to wp-admin → AllFeedback → Settings → Advanced → Privacy

Enable Disable User Details

When enabled, AllFeedback stops storing the visitor's raw IP address and user agent on new responses, and skips IP/identity-based duplicate detection.

Note this doesn't make responses fully anonymous: a non-reversible IP hash (used for rate limiting) and — for logged-in visitors — the WordPress user ID may still be recorded. Answers and submission timestamps are always saved.

Data Retention & Deletion

Deleting Individual Responses

Go to wp-admin → AllFeedback → Responses

Find the response, open its three-dot menu, and select Delete

Deleted responses are permanently removed and cannot be recovered.

Deleting All Data on Uninstall

By default, AllFeedback keeps your data when you deactivate or delete the plugin. To have everything removed on deletion:

Go to wp-admin → AllFeedback → Settings → Advanced → Plugin Management

Enable Delete data on uninstall

With this on, deleting the plugin permanently erases all surveys, responses, session data, settings, and logs. This is irreversible — enable it only if you're certain.

Manual Data Cleanup

You can also remove data directly via phpMyAdmin or standard database tools. AllFeedback's tables are prefixed with wp_af_ (or your site's table prefix followed by _af_).

Privacy Best Practices

Enable Require Consent if you operate under GDPR or similar regulations

Enable Disable User Details if you don't need to store visitor IPs/user agents

Regularly review and delete responses you no longer need

Link your privacy policy from the consent text

Keep your WordPress database backups stored securely

Data Processing Summary

All data is stored locally in your WordPress database

No data is sent to external services or third parties

By default, each response stores a non-reversible IP hash and the raw IP; enabling Disable User Details stops storing the raw IP (and user agent)

Consent status is recorded with each response when consent is required

You control retention and can delete individual responses, or all data on uninstall, at any time

You remain the data controller, and your visitors' information stays under your direct control.