<p>Locally mirrors commenters’ Gravatar, Libravatar and Mastodon avatars and serves them from your site, rather than loading them from a third-party web site upon each page load.</p>
<p>This has several effects:</p>
<ul>
<li>
<p>If most of the comments on a post have no avatar, those turn into <em>one</em> load of a shared image, instead of one for each comment, that happens to return the same “mystery” image.</p>
</li>
<li>
<p>You will be serving more (small) images.</p>
</li>
<li>
<p>If a commenter’s URL looks like a link to a Mastodon / ActivityPub profile, their Mastodon account’s avatar will be displayed.</p>
</li>
<li>
<p>When commenting, a live preview of the avatar tracks the contents of the “Email” field.</p>
</li>
<li>
<p><a href="https://www.gravatar.com/" rel="nofollow ugc">gravatar.com</a> and <a href="https://www.libravatar.org/" rel="nofollow ugc">libravatar.org</a> no longer have a web-bug on your blog that is loaded by each viewer.  Instead of being loaded at every page view, the avatar is loaded just once, on the server-side, at the time each new comment is posted.</p>
</li>
<li>
<p>If someone changes or deletes their avatar, your site continues displaying the image that was their avatar at the time that they last posted.</p>
</li>
<li>
<p>Likewise, the user’s Gravatar or Mastodon profile is saved along with their comment, viewable by admins even if they later change or delete it.</p>
</li>
</ul>
<h3>Security and Privacy</h3>
<ul>
<li>
<p><a href="https://www.libravatar.org/" rel="nofollow ugc">Libravatar</a> is open source. Gravatar is <a href="https://en.wikipedia.org/wiki/Gravatar" rel="nofollow ugc">owned by WordPress</a>, and their <a href="https://automattic.com/privacy/" rel="nofollow ugc">privacy policy</a> says that they don’t monetize that info.  But hey, corporate policies change, subpoenas exist, and domain names get sold.</p>
</li>
<li>
<p>Should you trust Gravatar with user data? Well, in 2024, Gravatar announced that they are <a href="https://jwz.org/b/ykXF" rel="nofollow ugc">pivoting to blockchain</a>, whatever that means, so that’s fairly disqualifying. See also <a href="https://jwz.org/b/ykPk" rel="nofollow ugc">WordPress “growth hacking”</a> and <a href="https://jwz.org/b/ykNg" rel="nofollow ugc">WordPress sells users’ data to train AI tools</a>.</p>
</li>
<li>
<p>There used to be a potential issue due to <a href="https://en.wikipedia.org/wiki/Gravatar#Security_concerns_and_data_breaches" rel="nofollow ugc">Gravatars using MD5 hashes</a>, but these days they use SHA256, so I assume that’s no longer a problem.</p>
</li>
</ul>


Mirror Gravatar


The plugin does just what it says and it's a great way to improve WordPress just a little bit.


Great plugin to make WordPress a bit better

Locally mirror commenters' Gravatar or Mastodon profile images.

raohmaru

<p>Disables default Gravatar.com avatar and redirection to gravatar.com servers, and allows to define a local default avatar image for users without avatar in his profile.</p>
<h3>1.1.2</h3>
<ul>
<li>Bug fixes.</li>
</ul>
<h3>1.1.1</h3>
<ul>
<li>Bug fixes.</li>
</ul>
<h3>1.1</h3>
<ul>
<li>Compatible with WordPress 4.8.</li>
<li>Support for high resolution avatar images</li>
</ul>
<h3>1.0</h3>
<ul>
<li>Initial release.</li>
</ul>


Default Gravatar Sans

Disables Gravatar.com avatar, and allows one local default avatar image for users without avatar in his profile.

Mirror Gravatar vs Default Gravatar Sans