Embed Privacy

Yes. As long as you don’t opt in to load external content, you/your visitors can’t be tracked by these services.

The embedding process itself will be privacy-friendly with Embed Privacy. That means, that no third-party embed provider can track users without their explicit consent by clicking on the overlay to allow the embed to be loaded. However, to make sure everything is fine you need to expand your privacy policy for each embed provider you’re using or you want to use because you need to specify, where data will be sent to and what happens to them.

If you use the opt-out functionality with the shortcode or the functionality to allow the user to always display content of certain embed providers, Embed Privacy creates a single cookie called embed-privacy with an expiration of 1 year to store the user’s choice.

Sure thing! We enjoy playing with the block editor and developed Embed Privacy with Gutenberg in mind, the plugin will work no matter the editor you use.

We currently support all oEmbed providers known to WordPress core by default. Want to know about them? Here you go:

• Amazon Kindle
• Anghami
• Animoto
• Bluesky
• Canva
• Cloudup
• DailyMotion
• Facebook
• Flickr
• Funny Or Die
• Imgur
• Instagram
• Issuu
• Kickstarter
• Meetup
• Mixcloud
• Photobucket
• Pocket Casts
• Polldaddy.com
• Reddit
• ReverbNation
• Scribd
• Sketchfab
• SlideShare
• SmugMug
• SoundCloud
• Speaker Deck
• Spotify
• TikTok
• TED
• Tumblr
• Twitter
• VideoPress
• Vimeo
• WordPress.org
• WordPress.tv
• YouTube

We also support Google Maps via iframe and Divi and the following plugins:

• BuddyPress activity stream
• Jetpack (Facebook posts)
• Maps Marker (Pro)
• Shortcodes Ultimate
• wpForo (with the plugin wpForo Embeds)

Additionally, we support the following custom content:

• Local Fediverse content
• Local X posts
• Facebook embed code (HTML)
• Instagram embed code (HTML)

Since version 1.2.0, you can also add custom embed providers by going to Settings > Embed Privacy > Manage embeds. Here you can also modify any existing embed provider, change its logo, add a background image, change the text displaying on the embed or disable the embed provider entirely.

Yes! Since version 1.5.0, Embed Privacy supports downloading and displaying thumbnails in posts for SlideShare, Vimeo and YouTube as background of Embed Privacy’s overlay.

Yes! You can use the shortcode [embed_privacy_opt_out] to add a list of embed providers anywhere you want (recommendation: add it to your privacy policy) to allow your users to opt-out.

The shortcode [embed_privacy_opt_out] can be used to let users opt-out of embed providers that have been set to be always active by the user. It can have the following attributes:

headline – Add a custom headline (default: Embed providers)


[embed_privacy_opt_out headline="My custom headline"]


subline – Add a custom subline (default: Enable or disable embed providers globally. By enabling a provider, its embedded content will be displayed directly on every page without asking you anymore.)


[embed_privacy_opt_out subline="My custom subline"]


show_all – Whether to show all available embed providers or just the ones the user opted in (default: false)


[embed_privacy_opt_out show_all="1"]

You can also combine all of these attributes:

[embed_privacy_opt_out headline="My custom headline" subline="My custom subline" show_all="1"]

If you’re using a caching plugin, make sure you enable the “JavaScript detection for active providers” in Settings > Embed Privacy > JavaScript detection. Then, the plugin is fully compatible with your caching plugin.

Check out our documentation: https://epiph.yt/en/embed-privacy/documentation/

We are Epiphyt, your friendly neighborhood WordPress plugin shop from southern Germany.

You can report security bugs through the Patchstack Vulnerability Disclosure Program. The Patchstack team help validate, triage and handle any security vulnerabilities. Report a security vulnerability.