HEIZHU Forms Tiny For LINE

HEIZHU Forms Tiny For LINE creates conversational LINE forms, manages questions and response logs, exports XLSX files, and can send a Discord notification after a form is completed.

Author: heiblack

Website: heizhu.org

Source code and build instructions

The human-readable source for the generated JavaScript and CSS in assets/dist/ is included in this plugin ZIP:

• resources/admin/main.js is the admin JavaScript entry point.
• resources/admin/App.vue, resources/admin/components/ and resources/admin/utils/ contain the Vue components and supporting code.
• resources/admin/i18n-source.js contains translation extraction strings.
• resources/styles/admin.css is the stylesheet entry point.
• vite.config.js, tailwind.config.js and postcss.config.js configure the build.
• package.json and package-lock.json define the build tools and exact npm dependency versions.

To rebuild, use Node.js 22.12.0 or a later compatible version and npm. From the plugin directory, run:

npm ci
npm run build

This regenerates assets/dist/ and assets/dist/manifest.json. WordPress loads the generated files through the manifest. Keep the manifest and its referenced files together. Node.js and npm are needed only for development; the distributed plugin includes the built assets and PHP dependencies and does not download executable assets at runtime.

Third-party source code

The admin bundle also contains code from the following public projects. Their repositories include the original source and upstream build instructions. Exact npm versions and integrity hashes are recorded in package-lock.json.

• Vue (including @vue runtime packages): https://github.com/vuejs/core
• Lucide Vue icons: https://github.com/lucide-icons/lucide
• Vue Draggable Plus: https://github.com/Alfred-Skyblue/vue-draggable-plus
• SortableJS (included by Vue Draggable Plus): https://github.com/SortableJS/Sortable
• Choices.js (JavaScript and CSS): https://github.com/Choices-js/Choices
• Fuse.js (used by Choices.js): https://github.com/krisk/Fuse
• Tailwind CSS (generated stylesheet utilities): https://github.com/tailwindlabs/tailwindcss

Build tools: https://github.com/vitejs/vite, https://github.com/vitejs/vite-plugin-vue, https://github.com/postcss/postcss and https://github.com/postcss/autoprefixer.

The server-side PHP library source and licenses are included under vendor/. composer.json and composer.lock describe those dependencies. PhpSpreadsheet source: https://github.com/PHPOffice/PhpSpreadsheet; ZipStream source: https://github.com/maennchen/ZipStream-PHP.

The extensionless config and functions files under vendor/phpoffice/phpspreadsheet/src/PhpSpreadsheet/Calculation/locale/ are runtime locale data read by PhpSpreadsheet and are intentionally included.

Privacy Policy

Last updated: August 27, 2026

Overview

HEIZHU Forms Tiny For LINE (“the plugin”) is a lightweight WordPress plugin for creating conversational forms through LINE. This Privacy Policy explains how the plugin processes information and which third-party libraries and services it uses.

Data collection by the plugin author

The plugin does not include telemetry, analytics, advertising, or tracking, and it does not send site data to a service operated by the plugin author. The plugin author does not receive or collect information from sites using this plugin.

The WordPress site on which the plugin is installed does process and store information when the site owner enables and uses the plugin’s features:

• LINE channel credentials and an optional Discord webhook URL are stored in the site’s WordPress database.
• In-progress form session data and webhook delivery records are stored temporarily and are scheduled for deletion after seven days.
• Completed form responses are stored in the site’s WordPress database. LINE user IDs are hashed before they are stored with completed responses.
• Photos submitted through a LINE camera action are encrypted before they are written to the site’s uploads directory. They are registered as hidden WordPress Media attachments without public thumbnails or plaintext image files.
• Encrypted photos can be decrypted only through an authenticated WordPress admin endpoint restricted by default to users who can manage site options. Image links in XLSX exports use the same protected endpoint, include a time-limited security nonce, and require a logged-in authorized account. Authorized administrators can permanently delete an encrypted photo from its response detail; this removes both the attachment record and encrypted file.
• The image encryption key is derived from the site’s WordPress secure authentication salts. Changing or losing those salts makes previously encrypted photos unreadable.

Third-party libraries and services

The plugin relies on the following third-party library and services. Information may be processed by these services according to the site owner’s configuration and their respective policies:

• PhpSpreadsheet — This open-source PHP library generates XLSX exports on the server where WordPress is installed. PhpSpreadsheet does not transmit information to its developers or collect data on behalf of the plugin author.
• LINE Messaging API — The plugin receives webhook events from LINE and sends replies through LINE. Message content, media, user identifiers, and related metadata may be processed by LY Corporation. See the LINE Messaging API documentation at https://developers.line.biz/en/docs/messaging-api/ and the LINE Privacy Policy at https://terms.line.me/line_terms_privacy.
• Discord Webhooks — When the site owner enables this optional integration, the form name and submitted answers are sent to the configured Discord webhook. See the Discord Privacy Policy at https://discord.com/privacy.

HEIZHU Forms Tiny For LINE is an independent third-party integration and is not affiliated with, endorsed by, or sponsored by LY Corporation or LINE.

Your responsibility

The site owner is responsible for determining what information is requested, establishing a lawful basis and obtaining any required consent, protecting LINE and Discord credentials, restricting access to stored responses and Discord channels, and publishing a privacy notice appropriate for the site’s users and jurisdiction. Only enable integrations that you trust and need.

Data removal

Uninstalling the plugin clears scheduled cleanup jobs. If the Data removal option is enabled, forms, settings, in-progress sessions, and webhook delivery records are also removed. Completed submissions and stored LINE photos are preserved unless the site owner removes them separately.

Changes to this policy

This Privacy Policy may be updated from time to time. The “Last updated” date above will reflect any revision.

Contact

For questions about this Privacy Policy, contact heiblack through the support information provided with the plugin.