Nothing is active by default. The setup wizard, started from the Heditra menu, asks which modules you want; each one adds its settings page under that menu.
Every file in the plugin is its own readable source: there is no build step, and no file is compiled or minified. The loaders of the Meta and TikTok pixels in assets/js/front.js are written for the plugin and follow the snippets published by Meta and TikTok.
Nothing below is contacted until you enable the matching module and enter your own identifier. With the consent gate on, visitors from the EU, the EEA, the United Kingdom and Switzerland load none of these scripts before they accept.
Used to display ads in the theme’s slots. When the Ads module is on and a publisher ID is set, the visitor’s browser loads https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js. Google receives the publisher ID, the page address, the IP address, the user agent and its own cookies or identifiers.
Terms of service · Privacy policy · How Google uses data from sites that use its services
Used to measure audience and the clicks on the theme’s buttons. When a GA4 measurement ID is set, the visitor’s browser loads https://www.googletagmanager.com/gtag/js. Google receives the measurement ID, the page address and title, the IP address, the user agent, the consent state and the events “download”, “see the offer”, “copy the code” and “see the price” with the label of the button.
Terms of service · Privacy policy
Used to load the tags you configure in your own container. When a container ID is set, the visitor’s browser loads https://www.googletagmanager.com/gtm.js. Google receives the container ID, the page address, the IP address and the user agent.
Terms of service · Privacy policy
Used to ask for consent when you choose “Google consent message”. The visitor’s browser loads https://fundingchoicesmessages.google.com/i/ followed by your publisher ID. Google receives the publisher ID, the page address, the IP address, the user agent and the visitor’s choice.
Terms of service · Privacy policy
Used to measure visits for Meta advertising. When a pixel ID is set, the visitor’s browser loads https://connect.facebook.net/en_US/fbevents.js. Meta receives the pixel ID, the page address, the IP address, the user agent and its own cookies.
Terms of service · Privacy policy
Used to measure visits for TikTok advertising. When a pixel ID is set, the visitor’s browser loads https://analytics.tiktok.com/i18n/pixel/events.js. TikTok receives the pixel ID, the page address, the IP address, the user agent and its own cookies.
Terms of service · Privacy policy
Only when you tick “Check the download links every day” in the library settings, which is off by default, or when you press “Check now”, your server requests each download address you typed in your application sheets, to find links that no longer answer. Typical hosts are Google Play, the App Store, the Microsoft Store and publishers’ sites. Only the address itself and the standard WordPress user agent are sent; no visitor data is involved.
Google Play terms · Google privacy policy · Apple terms · Apple privacy policy · Microsoft terms · Microsoft privacy statement
With the Share buttons module on, articles show links to X, Facebook, WhatsApp and LinkedIn. Nothing is loaded from these networks and nothing is sent to them while the page is displayed. They receive the address and the title of the article only when a visitor clicks one of the links.
X terms · X privacy policy · Facebook terms · Meta privacy policy · WhatsApp terms · WhatsApp privacy policy · LinkedIn user agreement · LinkedIn privacy policy
The plugin’s own statistics store a number of views and clicks per content and per day. No IP address, no cookie, no identifier and no user agent is stored, and nothing leaves your site. Editorial alerts are stored on the article they concern. Uninstalling the plugin removes its settings, its statistics, the alert log and its scheduled tasks. Your deals, applications, products and articles stay in the database.