onionreactor

Currently in Open Beta (v0.9.2) 
We are currently in an open beta phase! This means the plugin is completely free to use without limitations while we gather feedback from the community for our upcoming v1.0 release. Try it out, and please let us know what features you’d like to see!
PinOnion is a visual feedback tool that allows you and your clients to drop feedback pins directly onto any element of your live WordPress website. Stop wasting time with spreadsheets and endless email chains.

Key Features: 
* Visual Pinning: Click anywhere on your site to leave a comment attached to that specific HTML element. 
* Task Management: Mark pins as Open, In Progress, or Done. 
* Modern Interface: A sleek, floating interface that stays out of your way. 
* No Third-Party Tracking: All your data stays securely on your own server.

PinOnion Website Review

Lets your clients drop pins and leave feedback directly on any element of your live WordPress site for lightning-fast revisions.

Patrick Schlesinger

PagePin gives WordPress agencies and developers two tools for client feedback and bug reporting — Pinshots for screenshot-based bug reports and Pinpoints for DOM-based comment threads. Self-hosted, GDPR compliant, no cloud dependencies.
<h4>Pinshots — Bug Reporting</h4>
Screenshot-based feedback with visual markers. Place numbered markers anywhere on the page, add notes, and capture everything in a single screenshot. Perfect for quick bug reports, design reviews, and client feedback rounds.
<ul>
<li>Three Marker Types — Negative (red) for bugs, Positive (green) for approvals, Note (orange) for comments</li>
<li>One-Click Screenshots — Capture the current page instantly with all markers included</li>
<li>Email Delivery — Send feedback with screenshot attachment to up to 5 recipients</li>
<li>Custom Watermark — Brand every screenshot with your own text</li>
<li>Adjustable Compression — Image quality from 10% to 100%</li>
<li>Undo/Redo — Ctrl+Z / Ctrl+Y to undo and redo marker placements</li>
<li>Drag & Drop — Reposition markers by dragging them to the correct location</li>
</ul>
<h4>Pinpoints — Client Feedback</h4>
DOM-based comment threads attached directly to page elements — like Google Docs comments, but for your live website. Comments persist even when the page layout changes, making it ideal for ongoing collaboration and iterative design feedback.
<ul>
<li>Element-Attached Threads — Click any element to start a comment thread on it</li>
<li>Smart Element Matching — Comments survive layout changes through CSS selectors, content fingerprinting, and multi-signal scoring</li>
<li>@Mentions — Mention team members or external guests in comments to notify them</li>
<li>Resolve & Reopen — Mark threads as resolved and reopen them when needed</li>
<li>Sidebar Overview — All pinpoints listed in a slide-out sidebar with unread badges</li>
<li>Visual Indicators — Numbered badges on the page show where pinpoints are attached</li>
<li>Tag System — Organize pinpoints with custom colored tags (Bug, Design, Content, Urgent, or your own)</li>
</ul>
<h4>How It Works</h4>
<ol>
<li>Pin — Press Ctrl+Alt+F (or click the floating button) and click anywhere on your site</li>
<li>Capture — Screenshot, element position, and browser context are captured automatically</li>
<li>Ship — Feedback is delivered to your inbox or discussed in a pinpoint thread</li>
</ol>
<h4>Key Features</h4>
Screenshots & Markers
<ul>
<li>Three annotation tools with automatic numbering</li>
<li>Keyboard shortcuts: Ctrl+Alt+F to activate, keys 1/2/3 for tool selection</li>
<li>Customizable floating feedback button with inactivity auto-hide</li>
<li>Dual screenshot engines (html2canvas and html-to-image)</li>
<li>Touch support for tablets and mobile devices</li>
</ul>
Collaboration
<ul>
<li>External Collaborators — Invite anyone via Magic Link email or shareable URL (no WordPress account needed)</li>
<li>Collaborator Reuse — Grant existing guests access to additional pinpoints without creating new links</li>
<li>@Mention Notifications — Mention collaborators in comments to send email notifications with Magic Link access</li>
<li>Auto-Grant Access — Mentioning a collaborator automatically grants them access if they don’t have it yet</li>
<li>Share Modal — Internal link for team members, external sharing with guest dropdown or new guest creation</li>
<li>Thread Notifications — All thread participants (including collaborators) are notified of new comments</li>
<li>Configurable Link Expiry — Set Magic Links to expire after 7, 30, or 90 days</li>
</ul>
Admin & Management
<ul>
<li>Admin dashboard with feedback statistics and quick links</li>
<li>Feedback overview with status filters (New, Sent, Resolved) and bulk actions</li>
<li>Post/Page metabox showing pinpoint count per content</li>
<li>Admin bar integration with live feedback counter badge</li>
<li>Collaborator management with type display, inline email editing, and access control</li>
<li>Tag management with custom colors and usage statistics</li>
<li>8-step setup wizard for first-time configuration</li>
</ul>
Security & Access Control
<ul>
<li>Role-based access — control who can create, view, and resolve feedback</li>
<li>Granular pinpoint permissions (create, view, resolve per role)</li>
<li>Spam protection: honeypot, submission timing, rate limiting with escalation</li>
<li>Optional CAPTCHA: reCAPTCHA v2/v3, hCaptcha, Cloudflare Turnstile</li>
<li>Rate limit escalation (5 min → 15 min → 1 hour → 6 hours → 24 hours)</li>
</ul>
Privacy & Standards
<ul>
<li>100% self-hosted — your server, your database, your data</li>
<li>GDPR compliant — no external calls unless CAPTCHA is enabled</li>
<li>Clean uninstall — all data removed when plugin is deleted</li>
<li>Multilingual — English and German included, translation-ready</li>
<li>WordPress Coding Standards (WPCS 3.0) and PHPStan Level 5</li>
</ul>
<h4>Use Cases</h4>
<ul>
<li>Web Agencies — Collect and manage client feedback across projects</li>
<li>Developers — QA testing, bug reporting, and code review workflows</li>
<li>Support Teams — Visual bug reports from users with full context</li>
<li>Design Reviews — Attach comments to specific design elements for iterative feedback</li>
<li>Content Teams — Request page changes with visual annotations</li>
<li>Client Onboarding — Share feedback links with clients who don’t have WordPress accounts</li>
</ul>
<h4>Public Feedback Mode</h4>
Enable public feedback to allow website visitors (even without login) to submit visual feedback. Protected by multiple spam prevention measures:
<ul>
<li>Honeypot fields</li>
<li>Submission timing checks</li>
<li>Rate limiting per IP and session</li>
<li>Optional CAPTCHA (reCAPTCHA v2/v3, hCaptcha, Cloudflare Turnstile)</li>
</ul>
For more information visit <a href="https://pagepin.io" rel="nofollow ugc">pagepin.io</a>
<h3>Support</h3>
<ul>
<li>Website: <a href="https://pagepin.io" rel="nofollow ugc">pagepin.io</a></li>
<li>Support: service@pagepin.io</li>
</ul>
<h3>Third Party Services</h3>
This plugin connects to external services ONLY when you explicitly enable CAPTCHA protection:
<h4>Google reCAPTCHA (v2 or v3)</h4>
When enabled, user interaction data is sent to Google for spam verification. 
* Service: https://www.google.com/recaptcha/ 
* Privacy Policy: https://policies.google.com/privacy 
* Terms of Service: https://policies.google.com/terms
<h4>hCaptcha</h4>
When enabled, user interaction data is sent to hCaptcha for spam verification. 
* Service: https://www.hcaptcha.com/ 
* Privacy Policy: https://www.hcaptcha.com/privacy 
* Terms of Service: https://www.hcaptcha.com/terms
<h4>Cloudflare Turnstile</h4>
When enabled, user interaction data is sent to Cloudflare for spam verification. 
* Service: https://www.cloudflare.com/products/turnstile/ 
* Privacy Policy: https://www.cloudflare.com/privacypolicy/ 
* Terms of Service: https://www.cloudflare.com/website-terms/
Important: No data is sent to external services unless you explicitly enable CAPTCHA in the plugin settings. Without CAPTCHA, the plugin operates entirely on your own server.
<h3>Privacy</h3>
<h4>Data Collection</h4>
This plugin collects and stores the following data locally on your WordPress server:
For authenticated users (logged-in): 
* User ID (WordPress user reference) 
* Feedback content (screenshots, markers, messages) 
* Page URL where feedback was submitted 
* Timestamp
For public/anonymous feedback (when enabled): 
* Email address (if provided by the visitor) 
* IP address (for rate limiting only) 
* Session token (anonymous identifier) 
* Feedback content (screenshots, markers, messages) 
* Page URL and timestamp
For external collaborators (when enabled): 
* Display name 
* Email address (optional, for Magic Link invitations and @mention notifications) 
* Authentication token (for session-based access) 
* Access grants (which pinpoints the collaborator can view) 
* Last access timestamp
<h4>Data Retention</h4>
<ul>
<li>Feedback data: Stored until manually deleted by an administrator</li>
<li>Rate limiting data (IP/Session): Automatically deleted after 24 hours</li>
<li>Screenshots: Stored until feedback is deleted</li>
<li>Collaborator data: Stored until manually deleted by an administrator</li>
</ul>
<h4>Data Location</h4>
<ul>
<li>Database: WordPress database tables (prefixed with your WordPress table prefix)</li>
<li>Screenshots: <code>/wp-content/uploads/pagepin/</code> directory</li>
</ul>
<h4>GDPR Compliance</h4>
<ul>
<li>All data is stored locally on your server</li>
<li>No analytics or tracking is performed</li>
<li>No data is shared with third parties (unless CAPTCHA is enabled)</li>
<li>Data can be exported and deleted upon request via WordPress admin</li>
<li>IP addresses are pseudonymized after rate limit period</li>
</ul>
<h4>Consent</h4>
For public feedback mode, we recommend: 
* Linking to your privacy policy in the feedback form 
* Enabling the GDPR consent checkbox in plugin settings 
* Informing visitors about data collection in your site’s privacy policy

PagePin – Client Feedback & Bug Reporting

Pin it. Ship it. Visual feedback infrastructure for WordPress.

PinOnion Website Review vs PagePin – Client Feedback & Bug Reporting