Lints WordPress plugin and theme PHP for the GDPR/DSGVO duties the plugin author owns: missing privacy exporter/eraser hooks, raw IP storage, server-side Google Fonts, phone-home and pre-consent cookies. Runs entirely in your browser — nothing is uploaded.
Same engine as the VS Code extension, byte for byte.
This page is the working piece. The full pack has everything below.
Finds the 12 author-side privacy duties your plugin PHP breaks, with the article and the fix on every line.
A DSGVO code review by a German IT-law firm is commonly billed at EUR 200 per hour, and a Google Fonts Abmahnung letter is typically settled at EUR 100 plus fees.
Buy the full version — $29It reads WordPress plugin or theme PHP and reports the 12 privacy duties that fall on the plugin author, not on the site owner: missing wp_privacy_personal_data_exporters and erasers filters, raw REMOTE_ADDR storage, server-side Google Fonts, third-party CDN enqueues, analytics without a consent gate, hardcoded phone-home calls, cookies set before consent, and no uninstall cleanup. Every finding carries the article and the fix.
Freelance and agency WordPress developers who ship plugins and themes to clients in Germany, Austria and the rest of the EU, and anyone submitting to the WordPress.org plugin directory, where phoning home and remote-loaded assets are standing review blockers. It is aimed at the person writing the PHP, including PHP generated by an AI assistant.
PHPCS with the WordPress Coding Standards sniffs checks escaping, nonces, prefixes and formatting. It has no sniff for a missing privacy exporter filter, none for fonts.googleapis.com inside wp_enqueue_style, and none for a hardcoded wp_remote_post URL. It also cites no GDPR article, so you cannot hand its output to a client or a reviewer.
Free covers one file completely: open any PHP file, run the check, and you get every one of the 12 rules with the article and the fix. The same 12 rules also run in the browser with nothing installed. The licence key adds scope and ownership: one run across every PHP file in the plugin, plus a dated audit report in Markdown and JSON that you keep.
A DSGVO code review by a German IT-law firm is commonly billed around EUR 200 per hour. A Google Fonts Abmahnung is typically settled at about EUR 100 in damages plus the other side's fees, after LG Muenchen I, 3 O 17493/20, awarded that sum on 20 January 2022. A WordPress.org rejection costs you a fresh wait in the review queue.
One question, answered by the person who built it. Your email only if you want the answer sent.