Title: Confidr Author: puneett Published: 2026年10月13日 Last modified: 2026年10月13日 --- プラグインを検索 ![](https://ps.w.org/confidr/assets/banner-772x250.png?rev=3744709) ![](https://ps.w.org/confidr/assets/icon.svg?rev=3744709) # Confidr 作者: [puneett](https://profiles.wordpress.org/puneett/) [ダウンロード](https://downloads.wordpress.org/plugin/confidr.1.0.0.zip) * [詳細](https://ja.wordpress.org/plugins/confidr/#description) * [レビュー](https://ja.wordpress.org/plugins/confidr/#reviews) * [インストール](https://ja.wordpress.org/plugins/confidr/#installation) * [開発](https://ja.wordpress.org/plugins/confidr/#developers) [サポート](https://wordpress.org/support/plugin/confidr/) ## 説明 Confidr helps a WooCommerce store meet the Digital Personal Data Protection Act, 2023 (DPDPA) — India’s data protection law. It is built specifically for this Act, not adapted from a GDPR plugin, which matters: several GDPR-standard patterns (a“ legitimate interest” balancing test, a sensitive-data tier, a data portability right, generic 30-day deadlines) simply don’t exist under DPDPA, and a plugin that assumes they do will mislead you. **Everything lives inside your own WordPress/MySQL install.** No external service holds your customer data, your consent records, or your audit trail. The only outbound request this plugin ever makes is a narrow, disclosed, opt-in exception: an AI-assisted notice/policy drafting feature (off by default, uses your own API key). Every feature in this plugin is free — there is no paid tier. #### What it does * **Cache-safe consent banner** — client-side decision logic, safe behind any full- page cache, with a language switcher (English + Hindi shipped). * **Client-side + server-side script blocking** — a maintained tracker signature library plus a wrapper snippet for anything it can’t reach, with honest UI about the limits of automatic blocking. * **First-party checkout & registration consent** — classic and block checkout, unticked by default. * **Staff-entered consent** for phone/WhatsApp orders taken directly in wp-admin( S3(a)(ii)). * **Rights Centre** — access, correct, complete, update, erase, withdraw, nominate, and an elevated grievance path that’s the statutory pre-Board shield (S13(3)). * **Native WordPress privacy tools integration** — plugs into Tools Export/Erase Personal Data rather than reinventing it. * **Retention engine** implementing the real S8(8)/S8(11) dual test, correctly scoped to Third Schedule-class fiduciaries — never a fabricated timer for everyone else. * **Withdrawal propagation** to your registered processors, correctly scoped so it never touches fulfilment of orders already placed and paid for (S6(5)). * **Breach Console** — record, scope, notify principals and prepare the Board report, plus a penalty-mitigation export (S32/S33(2)). * **Command Center** — searchable customer consent state, force-block, off-platform opt-out recording. * **Re-consent Campaign** for customers who pre-date this plugin (S5(2)) — a notice duty, never a forced fresh opt-in. * **Processor Register** with the S8(3) proactive data-quality duty surfaced for fiduciary-role and decision-affecting entries. * **Notice & privacy policy generator** — static templates by default, optional AI-assisted drafting, always an editable draft. * **Audit trail** for every sensitive action, with a 12-month retention floor that survives customer erasure as a non-identifiable stub. * **Setup wizard** that ends with a real, unauthenticated check that your banner is actually live — not just configured. #### What this plugin does not do Being honest about scope is part of the product. Confidr deliberately does not: * Adjudicate whether an incident is a notifiable breach, or transmit anything to the Data Protection Board on your behalf. * Claim to block every tracking script automatically — a hand-pasted script needs the wrapper snippet. * Implement GDPR concepts that don’t exist under DPDPA (data portability, a sensitive- data tier, “legitimate interest”). * Apply a Significant Data Fiduciary duty, an exemption, or a Third Schedule threshold automatically — these depend on notifications only you (with counsel) can confirm apply to you. * Operate as a Consent Manager, or hold your customer data anywhere but your own database. #### Not legal advice Nothing in this plugin, its generated content, or its documentation constitutes legal advice. Have India-based DPDPA counsel review your actual notice, policy, and processes before you rely on them. ### External services This plugin does not send customer data, consent records, or audit logs to any third party. All of that stays in your WordPress database. #### Optional AI notice drafting (off by default) If you enable AI-assisted drafting and enter your own API key, the plugin sends a drafting prompt to OpenAI (`https://api.openai.com/v1/chat/completions`). That prompt contains only the business details you typed into Confidr (store name, contact, declared purposes, processor register summaries). It never includes customer emails, order data, or consent log rows. The call happens only when you click generate on the Notice & Policy Generator screen. It does not run on page views. This is provided by OpenAI. Terms of use: https://openai.com/policies/row-terms- of-use/ — Privacy policy: https://openai.com/policies/row-privacy-policy/ — API / business terms: https://openai.com/policies/business-terms/ — How API data is used: https://openai.com/policies/how-your-data-is-used-to-improve-model-performance/ WordPress 7.0 includes a core AI Client. This plugin still supports WordPress 6.2, so the optional drafter uses your own OpenAI key until the minimum WordPress version can be raised. #### Tracker signature list (no outbound call) The plugin ships a local list of known tracker URL fragments (for example googletagmanager. com or connect.facebook.net) so it can block those scripts on your storefront until consent is given. Matching happens in your WordPress install. The plugin does not contact Google, Meta, or those CDNs for this purpose. #### Banner live-check During setup, the wizard fetches your own site’s front page (`home_url`) to confirm the banner HTML is present. That request stays on your server. ## スクリーンショット [⌊The consent banner, cache-safe and language-switchable.⌉⌊The consent banner, cache- safe and language-switchable.⌉[ The consent banner, cache-safe and language-switchable. [⌊The Dashboard — compliance checklist, activity feed, consent trends.⌉⌊The Dashboard— compliance checklist, activity feed, consent trends.⌉[ The Dashboard — compliance checklist, activity feed, consent trends. [⌊The Rights Centre, with the elevated grievance path.⌉⌊The Rights Centre, with the elevated grievance path.⌉[ The Rights Centre, with the elevated grievance path. [⌊The Breach Console workflow.⌉⌊The Breach Console workflow.⌉[ The Breach Console workflow. [⌊The Command Center customer list.⌉⌊The Command Center customer list.⌉[ The Command Center customer list. ## インストール 1. Upload the plugin to `/wp-content/plugins/confidr`, or install through the WordPress plugins screen. 2. Activate. You’ll be redirected to the setup wizard. 3. Complete the wizard: business/contact details, exemption awareness, publish a notice, back up your hash secret (non-skippable), and confirm the banner is verified live on your storefront before you finish. 4. Review `/docs` in the plugin folder for the full documentation set, including the hash-secret backup guide — read that one first. ## FAQ ### Does this plugin send my customer data anywhere? No. Consent records, rights requests, breach records, and the audit trail all live in your own database. The only optional outbound request is AI-assisted drafting( off by default). If you turn it on and save your own OpenAI API key, a generate click sends business metadata only — never customer data. See “External services” above. ### Is this the same as a GDPR consent plugin? No — DPDPA and GDPR are meaningfully different laws. See `/docs/01-dpdpa-primer. md` for the specific differences that most GDPR-derived plugins get wrong under this Act. ### What happens if I lose my hash secret? Your consent log survives, but you lose the ability to match it to specific customers— see `/docs/10-hash-secret-backup.md`. Back it up the moment the setup wizard shows it to you. ### Do I need a Data Protection Officer? Almost certainly not — only a formally-notified Significant Data Fiduciary needs one (S10(2)(a)). Every merchant needs a published contact person (S8(9)), which is a different, much lighter requirement. ### Where’s the full documentation? The `/docs` folder shipped with the plugin — 18 topic guides plus an index, covering everything from script blocking to breach notification to phone-order consent capture to agency handover. ## 評価 このプラグインにはレビューがありません。 ## 貢献者と開発者 Confidr はオープンソースソフトウェアです。以下の人々がこのプラグインに貢献してい ます。 貢献者 * [ puneett ](https://profiles.wordpress.org/puneett/) [“Confidr” をあなたの言語に翻訳しましょう。](https://translate.wordpress.org/projects/wp-plugins/confidr) ### 開発に興味がありますか ? [コードを閲覧](https://plugins.trac.wordpress.org/browser/confidr/)するか、[SVN リポジトリ](https://plugins.svn.wordpress.org/confidr/) をチェックするか、[開発ログ](https://plugins.trac.wordpress.org/log/confidr/)を [RSS](https://plugins.trac.wordpress.org/log/confidr/?limit=100&mode=stop_on_copy&format=rss) で購読してみてください。 ## 変更履歴 #### 1.0.0 * Initial public release. Full consent loop, rights fulfilment, retention engine, breach console, and security mapping — the complete v1 scope, not a partial launch. ## メタ * バージョン **1.0.0** * 最終更新日 **10時間前** * 有効インストール数 **10未満** * WordPress バージョン ** 6.2またはそれ以降 ** * 検証済み最新バージョン: **7.1.3** * PHP バージョン ** 7.4またはそれ以降 ** * 言語 * [English (US)](https://wordpress.org/plugins/confidr/) * タグ * [consent](https://ja.wordpress.org/plugins/tags/consent/)[cookies](https://ja.wordpress.org/plugins/tags/cookies/) [DPDPA](https://ja.wordpress.org/plugins/tags/dpdpa/)[privacy](https://ja.wordpress.org/plugins/tags/privacy/) [woocommerce](https://ja.wordpress.org/plugins/tags/woocommerce/) * [詳細を表示](https://ja.wordpress.org/plugins/confidr/advanced/) ## 評価 レビューはまだ送信されていません。 [Your review](https://wordpress.org/support/plugin/confidr/reviews/#new-post) [すべてのレビューを見る](https://wordpress.org/support/plugin/confidr/reviews/) ## 貢献者 * [ puneett ](https://profiles.wordpress.org/puneett/) ## サポート 意見や質問がありますか ? [サポートフォーラムを表示](https://wordpress.org/support/plugin/confidr/)