GDPR For WordPress Plugin and Theme Developers

function register_my_plugin_exporter( $exporters ) {
	$exporters['my-plugin-exporter'] = array(
		'exporter_friendly_name'	=> __( 'My Plugin Exporter Name' ),
		'callback'			=> 'my_plugin_exporter',
	);
	return $exporters;
}
 
add_filter( 'wp_privacy_personal_data_exporters', 'register_my_plugin_exporter', 10 );

function my_plugin_exporter( $email_address, $page = 1 ) {
	// Limit us to 500 at a time to avoid timing out.
	$number = 500;
	$page   = (int) $page;
 
	$data_to_export = array();
	// In this example, we're getting comments, but you can use this function to get any data your plugin collects.
	$comments = get_comments(
		array(
			'author_email'              => $email_address,
			'number'                    => $number, // The max number of comments to retrieve.
			'paged'                     => $page, // The page number of this iteration of the function. $page == 1 returns comments 1-500, $page == 2 returns comments 501-1000, etc.
			'order_by'                  => 'comment_ID',
			'order'                     => 'ASC',
			'update_comment_meta_cache' => false,
		)
	);
 
	$comment_prop_to_export = array(
		'comment_author'       => __( 'Comment Author' ),
		'comment_author_email' => __( 'Comment Author Email' ),
		'comment_author_url'   => __( 'Comment Author URL' ),
		'comment_author_IP'    => __( 'Comment Author IP' ),
		'comment_agent'        => __( 'Comment Author User Agent' ),
		'comment_date'         => __( 'Comment Date' ),
		'comment_content'      => __( 'Comment Content' ),
		'comment_link'         => __( 'Comment URL' ),
	);
 
	foreach ( (array) $comments as $comment ) {
		$comment_data_to_export = array();
 
		foreach ( $comment_prop_to_export as $key => $name ) {
			$value = '';
 
			switch ( $key ) {
				case 'comment_author':
				case 'comment_author_email':
				case 'comment_author_url':
				case 'comment_author_IP':
				case 'comment_agent':
				case 'comment_date':
					$value = $comment->{$key};
					break;
 
				case 'comment_content':
					$value = get_comment_text( $comment->comment_ID );
					break;
 
				case 'comment_link':
					$value = get_comment_link( $comment->comment_ID );
					$value = '<a href="' . $value . '" target="_blank" rel="noreferrer noopener">' . $value . '</a>';
					break;
			}
 
			if ( ! empty( $value ) ) {
				$comment_data_to_export[] = array(
					'name'  => $name,
					'value' => $value,
				);
			}
		}
 
		$data_to_export[] = array(
			'group_id'    => 'comments', // An ID to identify this particular group of information.
			'group_label' => __( 'Comments' ), // A translatable string to label this group of information.
			'item_id'     => "comment-{$comment->comment_ID}", // The item ID of what we're exporting
			'data'        => $comment_data_to_export, // The personal data that should be exported
		);
	}
	// $done identifies whether or not the number of $comments is less than $number. If it is, all comments have been processed and we're done.
	$done = count( $comments ) < $number;
	// The function should return an array with the (array)'data' to be exported and whether or not we're (bool)'done'
	return array(
		'data' => $data_to_export,
		'done' => $done,
	);
}

function register_my_plugin_personal_data_eraser( $erasers ) {
	$erasers['my-plugin-eraser'] = array(
		'eraser_friendly_name' => __( 'WordPress Comments' ),
		'callback'             => 'my_plugin_personal_data_eraser',
	);
 
	return $erasers;
}
add_filter( 'wp_privacy_personal_data_erasers', 'register_my_plugin_personal_data_eraser', 10 );

function my_plugin_personal_data_eraser( $email_address, $page = 1 ) {
	global $wpdb;
 
	if ( empty( $email_address ) ) {
		return array(
			'items_removed'  => false,
			'items_retained' => false,
			'messages'       => array(),
			'done'           => true,
		);
	}
 
	// Limit us to 500 comments at a time to avoid timing out.
	$number         = 500;
	// Get us on the right page of comments
	$page           = (int) $page;
	$items_removed  = false;
	$items_retained = false;
 
	$comments = get_comments(
		array(
			'author_email'       => $email_address,
			'number'             => $number,
			'paged'              => $page,
			'order_by'           => 'comment_ID',
			'order'              => 'ASC',
			'include_unapproved' => true,
		)
	);
 
	$anon_author = __( 'Anonymous' );
	$messages    = array();
	// In this case WordPress isn't deleting comments, but instead is anonymizing it.
	// Your plugin could do something similar, or delete the data altogether.
	foreach ( (array) $comments as $comment ) {
		$anonymized_comment                         = array();
		$anonymized_comment['comment_agent']        = '';
		$anonymized_comment['comment_author']       = $anon_author;
		$anonymized_comment['comment_author_email'] = wp_privacy_anonymize_data( 'email', $comment->comment_author_email );
		$anonymized_comment['comment_author_IP']    = wp_privacy_anonymize_data( 'ip', $comment->comment_author_IP );
		$anonymized_comment['comment_author_url']   = wp_privacy_anonymize_data( 'url', $comment->comment_author_url );
		$anonymized_comment['user_id']              = 0;
 
		$comment_id = (int) $comment->comment_ID;
 
		/**
		 * Filters whether to anonymize the comment.
		 *
		 * @since 4.9.6
		 *
		 * @param bool|string                    Whether to apply the comment anonymization (bool).
		 *                                       Custom prevention message (string). Default true.
		 * @param WP_Comment $comment            WP_Comment object.
		 * @param array      $anonymized_comment Anonymized comment data.
		 */
		$anon_message = apply_filters( 'wp_anonymize_comment', true, $comment, $anonymized_comment ); // Default is true to anonymize comments, but filter could change this behavior to false
 
		if ( true !== $anon_message ) {
			if ( $anon_message && is_string( $anon_message ) ) {
				$messages[] = esc_html( $anon_message );
			} else {
				/* translators: %d: Comment ID */
				$messages[] = sprintf( __( 'Comment %d contains personal data but could not be anonymized.' ), $comment_id );
			}
 
			$items_retained = true;
 
			continue;
		}
 
		$args = array(
			'comment_ID' => $comment_id,
		);
 
		$updated = $wpdb->update( $wpdb->comments, $anonymized_comment, $args );
 
		if ( $updated ) {
			$items_removed = true;
			clean_comment_cache( $comment_id );
		} else {
			$items_retained = true;
		}
	}
	// $done identifies whether or not the number of $comments is less than $number. If it is, all comments have been processed and we're done.
	$done = count( $comments ) < $number;
	// The function should return an array with the following:
	//  (bool) 'items_removed' - were items removed 
	//  (bool) 'items_retained' - were items retained and anonymized
	//  (array) 'messages' - error messages related to this erasure request
	//  (bool) 'done' - are we done processing data or is there more to be processed
	return array(
		'items_removed'  => $items_removed,
		'items_retained' => $items_retained,
		'messages'       => $messages,
		'done'           => $done,
	);
}

function my_plugin_add_privacy_policy_content(){
	if( !function_exists( 'wp_add_privacy_policy_content' ) ) {
		return;
	}
	$content = wp_kses_post( wpautop( __( 'Your privacy policy content here', 'my-plugin' ) ) );
	wp_add_privacy_policy_content( 'My Plugin', $content );
}