Neuedaten Privacy Mail Log
| 开发者 | bastianschwabe |
|---|---|
| 更新时间 | 2026年9月6日 23:02 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
wp_mail(): recipients, subject, body, attachments (file names only), and whether the send succeeded or failed. Unlike most mail loggers, it treats the log itself as what it is — a growing collection of personal data — and gives you the tools to keep it small.
You decide per field whether the recipient name, the recipient email address, the subject and the body are anonymized: never, after a retention period, or immediately when the entry is written. Immediately anonymized data never reaches the database at all. A second retention stage deletes old entries completely. Anonymization is irreversible.
Features
- Logs every email sent through
wp_mail(), including failed sends with their error message - Log view with search, status filter and bulk delete; HTML emails are rendered in a sandbox that blocks scripts and forms
- Per-field anonymization: recipient name, recipient email address, subject and body — each set to never, after the retention period, or immediately
- Metadata-only mode: set the body to "Immediately" and the message content is never stored
- Three replacement styles for email addresses: a plain placeholder, a stable hash (still countable and searchable), or keeping just the domain
- Two-stage retention via WP-Cron: anonymize after a number of days, delete completely after a longer period
- Integrates with the WordPress privacy tools: personal data exports include matching log entries, and erasure requests anonymize them
- Test email screen to verify that logging works on your site
- Attachments are stored as file names only, never as files
- No dependencies, no external requests, no tracking
- Fields set to "Immediately" are anonymized before the entry is written, so that data never reaches the database.
- The retention cron anonymizes entries after a configurable number of days (default 30) and deletes them completely after a longer period (default 90 days).
- Personal data export requests (Tools → Export Personal Data) include matching log entries; erasure requests (Tools → Erase Personal Data) irreversibly anonymize them while the send record itself remains.
- Attachments are recorded as file names only. The plugin makes no external requests.
neuedaten_pml_logged— action fired after an email has been written to the log, with the entry id and the stored valuesneuedaten_pml_settings— filter the resolved plugin settingsneuedaten_pml_capability— filter the capability required for all plugin screens (defaultmanage_options)neuedaten_pml_retention_batch_size— filter how many entries each retention stage processes per cron run (default 500)
安装:
- Upload the plugin folder to
/wp-content/plugins/or install it through the Plugins screen. - Activate the plugin. From now on every email sent through
wp_mail()is logged. - Go to Mail Log → Settings and choose your anonymization and retention periods.
- Use Mail Log → Test Email to send yourself a test email and check the log entry.
屏幕截图:
常见问题:
Does it capture emails sent by SMTP plugins?
Emails are captured through the WordPress mail hooks (pre_wp_mail, wp_mail_succeeded, wp_mail_failed). SMTP plugins that build on wp_mail() are captured. A plugin that replaces the mail function entirely without firing these hooks bypasses the log.
What does the "Pending" status mean?
The email was handed over for sending, but neither the success nor the failure signal arrived — typically because another plugin took over the delivery and did not report back. The email may well have been sent.
What happens on a personal data erasure request?
All log entries addressed to the requested email address are irreversibly anonymized: recipient name and address, subject and body are replaced. The entry itself remains, so send statistics stay intact while no personal data is left.
How do I stop the body from being stored at all?
Set Body to Immediately on the settings screen. The message content is then replaced before the entry is written and never reaches the database — only metadata is logged.
Is anonymization reversible?
No. The original values are overwritten in the database. There is no way to restore them.
Does using this plugin make my site GDPR compliant?
No plugin can promise that. Privacy Mail Log gives you the tools — configurable retention, per-field anonymization, integration with the WordPress privacy tools — but compliance depends on your configuration and your processes. When in doubt, ask a professional.
更新日志:
- Initial release.