GDPR & Privacy
Privacy compliance for communities worldwide (GDPR + CCPA): a granular cookie-consent banner that honors Global Privacy Control / Do-Not-Track, a re-openable “Privacy choices / Do...
Privacy compliance for communities worldwide (GDPR + CCPA): a granular cookie-consent banner that honors Global Privacy Control / Do-Not-Track, a re-openable “Privacy choices / Do Not Sell or Share” control, proof-of-consent logging, member self-service data export and account erasure, and configurable IP-log retention.
AI security review
✓
Reviewed safe · 95/100
A legitimate GDPR/privacy extension implementing a cookie-consent banner, member data export/erasure, and IP-log retention. Uses parameterized queries, proper validation, CSRF tokens, and correct middleware-based authorization with no external exfiltration or dangerous dynamic code.
- low · Data export has no rate limiting — GET /privacy/export (src/Extension.php) is auth-protected and scoped to the current user, but heavy DB queries across many tables could be invoked repeatedly; consider throttling. Not a security flaw per se.
- low · Inline HTML templates built via heredoc — adminPage() and privacyPage() build HTML strings directly; admin-facing values are htmlspecialchars-escaped and csrf_token is framework-generated, so risk is minimal, but template rendering would be safer than string interpolation.
Automated review of v1.0.0 by claude-opus-4-8 1 month ago. This is an automated signal to aid your judgment — not a guarantee.