Privacy Policy for WP Smart Image Inserter
Effective date: October 17, 2026
WP Smart Image Inserter is a Chrome extension that helps users match local images to H2 headings in the WordPress Gutenberg editor, upload reviewed images to their WordPress website, and insert image blocks beneath the corresponding headings.
Publisher
Publisher: YOUR NAME OR BUSINESS NAME
Contact: thenestgarden02096@gmail.com
Information handled by the extension
The extension handles the following information only when the user opens and operates it:
- The active WordPress website origin and tab identifier.
- WordPress post title, post ID, post status, native H2 heading text, Gutenberg block identifiers, and whether an image already exists beneath a heading.
- Images explicitly selected by the user, including filenames, file types, file sizes, previews, and matching choices.
- Operation progress, insertion results, WordPress media identifiers, and error information.
The extension does not collect analytics or telemetry.
How information is used
Information is used only to:
- Scan native H2 blocks in the active WordPress Gutenberg editor.
- Match selected image filenames with heading text.
- Allow the user to review proposed matches.
- Upload approved images to the selected WordPress website.
- Insert image blocks beneath corresponding headings.
- Restore operation progress and retry failed operations.
- Save an unpublished draft when explicitly requested.
The extension does not publish WordPress posts automatically.
Local storage and retention
Editor metadata, image matches, and operation progress are stored temporarily in chrome.storage.session and normally disappear when the browser session ends.
Selected images are stored locally in extension IndexedDB so an operation can continue after the popup closes and failed operations can be retried. They remain until the user selects another folder, uses Reset Selection, clears the extension's local data, or uninstalls the extension.
The extension does not store WordPress passwords, cookies, REST nonces, API keys, or authentication tokens.
Network communication
User-approved images are uploaded only to the same-origin WordPress REST API of the website currently being edited.
The extension uses the user's existing WordPress login session. WordPress authentication information and REST nonces are not transmitted to the extension developer.
HTTPS is required for non-local WordPress websites. HTTP is supported only for localhost and 127.0.0.1 development environments.
The extension does not send information to the extension developer, analytics services, advertising networks, data brokers, or unrelated third parties.
Data sharing and sale
The extension does not sell user data.
Information is transferred only to the WordPress website selected by the user when necessary to provide image-upload and insertion functionality.
The user's WordPress hosting provider and infrastructure may process uploaded images according to that website owner's privacy practices.
Remote code
All executable code is included inside the installed extension package. The extension does not download or execute remotely hosted JavaScript or other remote executable code.
Security
- HTTPS is required for non-local WordPress websites.
- Supported image file types, sizes, and file signatures are validated.
- Filenames and alternative text are sanitized.
- Cross-origin REST API destinations are blocked.
- Uploads are processed sequentially.
- Passwords and authentication tokens are not stored.
User control
Users control:
- When an article is scanned.
- Which image folder and files are selected.
- Which image matches are approved.
- When images are uploaded and inserted.
- Whether an unpublished draft is saved.
Users can remove locally stored images and operation results using Reset Selection. Uninstalling the extension removes its extension-local data through Chrome.
Limited Use
Information obtained through Chrome extension permissions and APIs is used only to provide WP Smart Image Inserter's disclosed single purpose.
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
User data is not used for advertising, profiling, credit decisions, lending decisions, or unrelated purposes.
Changes to this policy
This policy may be updated if the extension's functionality or data practices change. The effective date will be updated when material changes are made.
Contact
For privacy questions or deletion requests, contact thenestgarden02096@gmail.com.