Privacy and data

Last updated: October 3, 2026

Data stored in the shop

The plugin stores operational data about media attachments, file identity, detected references, analysis runs and cleanup/recovery activity. Recovery copies can contain the original files, attachment metadata and information needed to restore recorded references. Treat them with the same care as your uploads and database backups.

Recovery access and retention

Recovery storage must be protected from public downloads. The protection check accesses a probe through the site’s own uploads URL; it is not an external media-scanning service. Review proxy, CDN and web-server rules if protection cannot be confirmed.

Choose a finite recovery retention period or intentionally keep copies until manual removal. Expired copies rely on background processing for cleanup. CSV reports downloaded by a manager are separate files; deleting an analysis or uninstalling the plugin does not remove those downloaded copies.

Pro reporting

Pro analysis history is limited to up to 30 completed snapshots from the last 30 days. Optional report emails send analysis counts through the shop’s configured email system to the chosen recipient. Enable reporting only for intended recipients and review the delivery service used by the site.

Updates and removal

The WordPress.org package uses WordPress.org updates. IPS-distributed packages use the IPS update channel, and Pro can contact IPS for license and update checks. Media analysis and cleanup run within the site.

A normal uninstall removes selected installation and automation options but deliberately retains the operational tables. Do not expect uninstall to erase all indexes, reports or recovery files. If complete removal is required, first finish any needed restores, back up the site and plan removal of the retained plugin data and files separately.

Related guidance

  • Recovery — check protected storage and restore limits.
  • Troubleshooting — diagnose background processing or protection failures.