stoeck

PhotoProof turns WordPress into a proofing platform for photographers. Create galleries, share them with your clients, and let them pick their favorite shots — no account needed for browsing, login required only for validation.
Key features:
<ul>
<li>Standalone gallery template — a clean, distraction-free gallery page, fully isolated from your theme</li>
<li>Client selection workflow — clients click to select photos, auto-saved in real-time, then confirm with a single button</li>
<li>Watermark protection — overlay your logo on gallery images (GD or Imagick), with adjustable opacity. Configured globally, applied per-gallery via a simple toggle.</li>
<li>Automatic file renaming — organize your deliverables with a configurable naming pattern. Optional per-gallery custom name to override the default.</li>
<li>Private UUID links — optionally replace gallery slugs with impossible-to-guess UUIDs for extra privacy</li>
<li>Access expiration — auto-archive galleries after 30 days to keep your workspace clean</li>
<li>Email notifications — photographer and client both receive confirmation emails when a selection is validated, with customizable templates</li>
<li>Photographer recommendations — mark your favorite shots to guide the client’s selection</li>
<li>CSV export — export the validated selection as a spreadsheet</li>
<li>Client dashboard shortcode — <code>[photoproof_galleries_client]</code> displays all galleries assigned to the logged-in client</li>
<li>Multilingual — fully translatable, ships with French (partial AI translations for German, Spanish and Italian)</li>
<li>Customizable design — choose background, accent and text colors, upload your logo, toggle rounded corners</li>
</ul>
PhotoProof stores all gallery photos in a dedicated folder (<code>/uploads/photoproof/</code>), separate from the standard Media Library.
Built for photographers, by a photographer. PhotoProof is built and maintained by Cédric Stoecklin, a photographer who needed a proofing tool that wouldn’t lock him into a SaaS or share his clients’ photos with third parties. Free, open source, and built to last. More details and a full walkthrough on <a href="https://photoproof.cedricstoecklin.com/" rel="nofollow ugc">photoproof.cedricstoecklin.com</a>.
<h3>For developers</h3>
PhotoProof is built to be extended. It exposes action hooks, filter hooks, helper functions and a shortcode — everything you need to wire it into your own workflow or build a plugin on top.
Action hooks include <code>photoproof_gallery_selection_confirmed</code> (fired when a client validates), <code>photoproof_attachment_uploaded</code> (fired after a photo is processed) and <code>photoproof_daily_expiration_check</code> (cron hook for daily maintenance).
Template tags include <code>photoproof_get_client_galleries()</code>, <code>photoproof_get_gallery_status()</code>, <code>photoproof_get_gallery_selection()</code> and more — callable from any theme template.
Shortcode <code>[photoproof_galleries_client]</code> displays a grid of galleries assigned to the currently logged-in user, with configurable columns and display options.
Full developer documentation with code examples is available at <a href="https://photoproof.cedricstoecklin.com/#developer" rel="nofollow ugc">photoproof.cedricstoecklin.com#developer</a>.
<h3>External services</h3>
PhotoProof does not connect to any external service. All gallery photos, client data, watermarks, email templates and CSV exports are stored and processed entirely on your own WordPress installation. No data is sent to third-party servers, no tracking, no analytics, no API calls. Your photographs and your clients’ selections never leave your hosting.
<h3>Privacy</h3>
PhotoProof stores the following data:
<ul>
<li>Gallery metadata (title, status, client assignment) in WordPress’ standard <code>wp_posts</code> and <code>wp_postmeta</code> tables</li>
<li>Gallery-specific metadata (UUID, watermark state, expiration date) in a custom table <code>wp_photoproof_galleries</code></li>
<li>Uploaded photos in <code>/uploads/photoproof/</code> (separate from the main Media Library), with optional watermarked copies in <code>/watermarked/</code></li>
<li>Client selections as post meta on the gallery</li>
<li>Photographer recommendations as post meta on each attachment</li>
<li>Plugin settings (colors, watermark, email templates) as standard WordPress options</li>
</ul>
No data is collected, transmitted or shared with third parties. The plugin uses no cookies beyond WordPress’ standard session handling for authenticated users.
Uninstalling the plugin (not deactivating) permanently removes all of the above. Deactivation preserves all data.

PhotoProof

Self-hosted gallery proofing for photographers. Share galleries with your clients, let them pick their favorite photos, get the selection back as CSV  …

Lovedeep

lovedeep5

Proofing Pins lets clients and reviewers click anywhere on your site’s frontend to drop a comment pinned to that exact spot. Each pin is captured with a viewport screenshot so developers see what the reviewer saw. All comments live in a focused Proofing dashboard in wp-admin — no more “the button under the banner thing” emails.
Watch the 2-minute tutorial:
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/8UJX0GmM79k?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
Core features
<ul>
<li>Pin-point comments: reviewers click, type, submit — pin is saved with a screenshot that has the pin baked into the image at the click location.</li>
<li>Modern capture: uses the html-to-image library (SVG foreignObject renderer) for reliable screenshots even on Elementor or block-theme pages.</li>
<li>Responsive anchoring: pins are stored against the clicked element (selector + percentage-within-element), so they follow the element across viewport sizes.</li>
<li>Threaded replies: native WordPress comments attached to each pin for discussion between reviewers and developers.</li>
<li>Admin dashboard: list + grid views, status workflow (Open / In Progress / Resolved / Archived), bulk actions.</li>
<li>Guest comments: optional — let logged-out visitors leave pins with a one-time name/email prompt (cookie-remembered for 30 days), with honeypot + per-IP rate limiting.</li>
<li>AI suggestions (optional, BYO key): bring your own OpenAI, Anthropic, Google Gemini, or OpenRouter API key. Each pin gets a one-paragraph suggestion on what to change.</li>
<li>Elementor-aware Apply button: when the AI proposes an allowlisted change (heading text, button text, color), a before/after preview appears with an “Apply to Elementor” button. Applies the change to the live page, saves a WordPress revision, one-click revert available.</li>
<li>Microsoft Teams notifications (optional): post pin activity directly to a Teams channel using a Workflow webhook. Pick which events you want — new pins, replies, and per-status transitions (Open / In Progress / Resolved / Archived). Each notification is an Adaptive Card with the comment, author, page, status, and (where small enough) the screenshot. Webhook URL is stored encrypted at rest; one-click “Send test message” verifies the wire.</li>
<li>Generic webhook notifications (optional): post the same pin activity as plain JSON to any HTTPS endpoint of your choice. Works with Zapier, n8n, Make, Power Automate, IFTTT, or any custom HTTP receiver. Each <code>pin_created</code> payload includes the screenshot URL, so downstream tools (image search, OCR, Trello cards, etc.) can attach the visual right away. Same encryption + test-message verification as the Teams integration.</li>
</ul>
Data, privacy, and third-party services
<ul>
<li>The plugin does not send any data to third parties by default.</li>
<li>The AI feature is opt-in. You provide your own API key; requests go directly from your WordPress server to the provider you configure (OpenAI, Anthropic, Google, or OpenRouter). No data is sent to the plugin author. When enabled, each new pin’s comment text, captured element HTML, and metadata are sent to the configured provider so it can generate a suggestion — consult your provider’s privacy policy.</li>
<li>The Microsoft Teams integration is opt-in. You provide your own Teams Workflow webhook URL; notifications are posted directly from your WordPress server to that webhook (typically a Microsoft-hosted Azure Logic Apps endpoint). No data is sent to the plugin author. Payloads include the pin comment, author name, page URL, status, and a heavily compressed thumbnail when one fits — see “External Services” below for the exact contract.</li>
<li>The Generic Webhook integration is opt-in. You provide your own HTTPS endpoint; JSON payloads are posted directly from your WordPress server to that endpoint. The destination is entirely controlled by you; the plugin contacts no specific third-party service for this feature. No data is sent to the plugin author. Payloads include the pin comment, author name, author email (when available), page URL, status, and the screenshot URL — see “External Services” for the exact contract.</li>
<li>Screenshots are stored locally in your WordPress uploads folder — never uploaded elsewhere.</li>
<li>Guest identities (name + email) are stored in a cookie (<code>proopin_guest_identity</code>) for 30 days only on the visitor’s own browser.</li>
<li>When guest commenting is enabled, the plugin stores a short hash of each guest submitter’s IP address (first 16 characters of the MD5 hash) for the sole purpose of rate-limiting abusive submissions. Raw IP addresses are never stored.</li>
</ul>
<h3>External Services</h3>
This plugin can connect to third-party services only when their corresponding integration is explicitly enabled. Every integration is opt-in and disabled by default. No external connections are made unless you turn on a feature and provide its credential (API key for AI, webhook URL for Teams) in the plugin’s settings screens.
When AI is enabled and a new pin is created (or you manually trigger a suggestion), the following data is sent from your WordPress server directly to your configured AI provider: the pin’s comment text, the page URL, the page title, the clicked element’s tag name and a short HTML snippet, and the element’s CSS selector. No data is sent to the plugin author at any time.
When Microsoft Teams is enabled, the following data is sent from your WordPress server directly to the Workflow webhook you configured (typically a Microsoft-hosted endpoint at logic.azure.com): the pin’s comment text, the author’s display name (or guest name), the page URL, the pin status, the event type, and — only when it fits inside Teams’ card-size budget — a heavily compressed JPEG thumbnail of the pin’s screenshot. The webhook URL is supplied by you and points to whatever channel/workflow you set up in Teams; the plugin does not contact any other Microsoft endpoint. No data is sent to the plugin author at any time.
Only the providers you configure are contacted. Each supported service is documented below.
<h4>OpenAI</h4>
Used for: generating AI pin suggestions and listing available models. 
Data sent: pin comment, page URL, element context (tag, HTML snippet, selector). 
Sent when: AI suggestions are enabled and a pin is created (if auto-suggest is on), or when you click “Regenerate suggestion” in the pin detail view.
<ul>
<li>Service: https://openai.com/</li>
<li>Terms of Use: https://openai.com/policies/terms-of-use</li>
<li>Privacy Policy: https://openai.com/policies/privacy-policy</li>
</ul>
<h4>Anthropic</h4>
Used for: generating AI pin suggestions and listing available models. 
Data sent: pin comment, page URL, element context (tag, HTML snippet, selector). 
Sent when: AI suggestions are enabled and a pin is created (if auto-suggest is on), or when you click “Regenerate suggestion”.
<ul>
<li>Service: https://www.anthropic.com/</li>
<li>Terms of Service: https://www.anthropic.com/legal/consumer-terms</li>
<li>Privacy Policy: https://www.anthropic.com/legal/privacy</li>
</ul>
<h4>Google Gemini (Generative Language API)</h4>
Used for: generating AI pin suggestions and listing available models via Google’s Generative Language API (generativelanguage.googleapis.com). 
Data sent: pin comment, page URL, element context (tag, HTML snippet, selector). 
Sent when: AI suggestions are enabled and a pin is created (if auto-suggest is on), or when you click “Regenerate suggestion”.
<ul>
<li>Service: https://ai.google.dev/</li>
<li>Terms of Service: https://ai.google.dev/gemini-api/terms</li>
<li>Privacy Policy: https://policies.google.com/privacy</li>
</ul>
<h4>OpenRouter</h4>
Used for: generating AI pin suggestions and listing available models via the OpenRouter gateway (openrouter.ai). 
Data sent: pin comment, page URL, element context (tag, HTML snippet, selector). 
Sent when: AI suggestions are enabled and a pin is created (if auto-suggest is on), or when you click “Regenerate suggestion”.
<ul>
<li>Service: https://openrouter.ai/</li>
<li>Terms of Service: https://openrouter.ai/terms</li>
<li>Privacy Policy: https://openrouter.ai/privacy</li>
</ul>
<h4>Microsoft Teams (via user-configured Workflow webhook)</h4>
Used for: posting pin activity (new pin, new reply, status change) to a Microsoft Teams channel as Adaptive Cards. 
Data sent: pin comment, author display name (or guest name), page URL, pin status, event type, and — when small enough to fit Teams’ card payload budget — a heavily compressed JPEG thumbnail of the pin screenshot. 
Sent when: the Teams integration is enabled, a webhook URL is configured, and the corresponding event happens on a pin. Also sent on demand when the admin clicks “Send test message” on the Teams settings screen.
The destination URL is provided entirely by you. The plugin only posts to whichever Workflow webhook URL you save (typically a Microsoft-hosted endpoint at https://*.logic.azure.com/ — created by Teams’ “Post to a channel when a webhook request is received” workflow template). The webhook URL is stored encrypted at rest.
<ul>
<li>Service: https://www.microsoft.com/en-us/microsoft-teams/group-chat-software</li>
<li>Terms of Service: https://www.microsoft.com/en-us/servicesagreement/</li>
<li>Privacy Statement: https://privacy.microsoft.com/en-us/privacystatement</li>
</ul>
<h4>Generic Webhook (user-configured endpoint)</h4>
Used for: posting pin activity (new pin, new reply, status change) as plain JSON to any HTTPS endpoint of your choice. Common destinations are Zapier, n8n, Make, Power Automate, IFTTT, or your own custom webhook receiver — but the plugin does not contact any specific service. The destination is whatever URL you save.
Data sent: pin id, pin comment, pin status, pin status label, page URL, page title, screenshot URL (or empty string when none), pin admin URL, author name + email + guest flag, created-at timestamp; reply id + content + author for reply events; old/new status keys + labels for status-change events; site URL + name + event timestamp on every payload.
Sent when: the Generic Webhook integration is enabled, a webhook URL is configured, and the corresponding event happens on a pin. Also sent on demand when the admin clicks “Send test message” on the Webhook settings screen.
The destination URL is provided entirely by you and is stored encrypted at rest. The plugin enforces <code>https://</code> and validates the URL format before saving. No data is sent to the plugin author.
<h3>Third-Party Libraries</h3>
<ul>
<li>html-to-image (bubkoo/html-to-image, MIT License) — bundled as <code>assets/js/html-to-image.min.js</code>. Used for client-side viewport screenshot generation.</li>
</ul>

Proofing Pins

Pin-point client feedback on any page with screenshots. AI suggestions, Teams, generic webhook, 1-click Apply for Elementor.

PhotoProof vs Proofing Pins