can plugins put tracking system on their plugins?

Miroslav Glavić
(@miroslavglavic)

6 years, 3 months ago

So… Here is the screenshot: https://imgur.com/7yrXwJV.

I noticed that Avast is telling me that there are two tracking systems on my site. There are 3 banners on my site. I use an adrotating plugin, the banners are on the sites media libraries so no third-party advertising companies. The 3 sites are my own sites.

I removed analytics plugin.

So, I switched themes, thinking it could be the theme, nope it wasn’t. I switch back to the original theme.

I deactivate all the plugins. Activate 1, refresh page on the other tab…no more tracking. Eventually I find out that it’s one specific plugin. I have not seen any ads on my own sites. either than the 3 to my own sites.

Not sure what the rules are in this case for me to mention the plugin. I don’t want to shame the plugin author. I just want an explanation.

Should I contact the plugin author or should I tel WordPress/Automattic and let them deal with it?

Viewing 5 replies - 1 through 5 (of 5 total)

Alexander Gounder
(@gounder)

6 years, 3 months ago

There’s a plugin review channel on the Make WP slack, where you can talk about this. You can find the link here – https://make.ww.wp.xz.cn/plugins/

Also see this page for more information – https://developer.ww.wp.xz.cn/plugins/wordpress-org/plugin-security/reporting-plugin-security-issues/ and https://developer.ww.wp.xz.cn/plugins/privacy/

Joy
(@joyously)

6 years, 3 months ago

It’s better not to do it in Slack, either…
There is a plugin guideline that says any tracking must be opt-in. So just email the details to [email protected] and they will handle it.

Thread Starter Miroslav Glavić
(@miroslavglavic)

6 years, 3 months ago

@gounder Thank You. I went to all the links you provided. I then sent WordPress an e-mail (from the first link you provided). Hopefully things get fixed with the plugin.
Thread Starter Miroslav Glavić
(@miroslavglavic)

6 years, 3 months ago
@joyously thank you for your reply. You typed it as I was e-mailing [email protected] and typing my reply to @gounder .

I don’t do Slack by the way.
- This reply was modified 6 years, 3 months ago by Miroslav Glavić.
Moderator Jan Dembowski
(@jdembowski)

Forum Moderator and Brute Squad

6 years, 3 months ago

can plugins put tracking system on their plugins?

Not without explicit consent from the user.

Should I contact the plugin author or should I tel WordPress/Automattic and let them deal with it?

Yes to the plugin author if you want but no to WordPress/Automattic. As you know, Automattic has nothing to do with the place. The plugins team at that email you posted is not part of Automattic. You can inform the plugins team via email if you choose.