GDPR & Privacy Compliance

Included in Free - This feature is available in the free version of MediaVerse.

MediaVerse integrates with the WordPress privacy tools built into Tools > Export Personal Data and Tools > Erase Personal Data. No configuration is required. The integration is active whenever the plugin is active.

The privacy functionality lives in GDPRService.php.

What Gets Exported

When an administrator runs a personal data export for a user, MediaVerse adds the following data groups to the export ZIP:

Data Group	What Is Included
Media uploads	File URLs, titles, descriptions, privacy level, upload date
Comments	All comments the user posted on media items
Reactions	Each reaction (emoji, media item, timestamp)
Favorites	Each media item the user saved as a favorite
Direct messages	All conversation participants and message content
Follow relationships	List of users the subject follows and users following the subject

The export respects the WordPress standard format. Each group appears as a named section in the downloadable HTML and JSON files.

What Gets Erased

When an administrator runs a personal data erasure for a user, MediaVerse removes:

• All media items uploaded by that user (files and database records)
• All comments posted by that user on media items
• All reactions and favorites
• All direct message conversations and messages where the user is a participant
• All follow relationships (both directions)

Erasure is permanent and cannot be undone. Media items that belong to BuddyPress groups are also removed.

Before erasing, WordPress asks the user to confirm the request via email. MediaVerse erasure only runs after that confirmation is received.

Privacy Policy Text

MediaVerse registers suggested privacy policy text via wp_add_privacy_policy_content(). The suggestion appears in the Privacy Policy Guide at Settings > Privacy > Privacy Policy Guide.

The suggested text describes:

• What media metadata is collected and stored
• How direct messages are stored and for how long
• What follow data is retained
• How to request export or erasure

You are not required to use the suggested text verbatim. Review it and incorporate the relevant parts into your site’s privacy policy.

Developer Notes

MediaVerse registers its exporters and erasers through the standard WordPress privacy hooks. It does not add its own wrapper filters - extend the export/erase flow with the WordPress-core filters directly.

Adding Custom Data to the Export

Register your own exporter via WordPress core’s wp_privacy_personal_data_exporters filter:

add_filter( 'wp_privacy_personal_data_exporters', function( $exporters ) {
    $exporters['my-extension'] = [
        'exporter_friendly_name' => __( 'My Extension Data', 'my-extension' ),
        'callback'               => 'my_extension_export_callback',
    ];
    return $exporters;
} );

Hooking into Erasure

Register your own eraser via WordPress core’s wp_privacy_personal_data_erasers filter:

add_filter( 'wp_privacy_personal_data_erasers', function( $erasers ) {
    $erasers['my-extension'] = [
        'eraser_friendly_name' => __( 'My Extension Data', 'my-extension' ),
        'callback'             => 'my_extension_erase_callback',
    ];
    return $erasers;
} );