Supernifty

<p>Bublz turns your WordPress site into a visual feedback board. Click any element on any page to pin a task to it — then track everything on a drag-and-drop kanban board. No external tools. No extra logins. It all lives inside your WordPress dashboard.</p>
<p><strong>Key Features:</strong></p>
<ul>
<li><strong>Click-to-Pin Feedback</strong> — Click any page element to create a task pinned to that exact spot</li>
<li><strong>Visual Kanban Board</strong> — Drag and drop tasks between customizable status columns</li>
<li><strong>Priority Levels</strong> — Color-coded priorities so urgent issues stand out</li>
<li><strong>User Assignment</strong> — Assign tasks to any WordPress user</li>
<li><strong>Page-Linked Tasks</strong> — See every task associated with the current page</li>
<li><strong>Frontend Task Bar</strong> — Create and review tasks without leaving the frontend</li>
</ul>
<p><strong>Perfect For:</strong></p>
<ul>
<li><strong>Freelancers</strong> — Give clients a way to point at problems instead of describing them in emails</li>
<li><strong>Agencies</strong> — Manage feedback across client sites from a familiar WordPress interface</li>
<li><strong>Developers</strong> — Track bugs where they actually happen, not in a separate tool</li>
<li><strong>Site Maintainers</strong> — Collect enhancement requests with context attached</li>
</ul>
<p><strong>Why Choose Bublz?</strong></p>
<p>WordPress-native — not a SaaS overlay. Your data stays on your server. No per-seat pricing — everyone on your WordPress site can use it. Self-hosted and GDPR-friendly by design. Lightweight — no bloat, installs in seconds, loads fast, stays out of your way.</p>
<h3>External services</h3>
<p>This plugin connects to the Gravatar service (provided by Automattic Inc.) to display user avatars.</p>
<h4>What it does</h4>
<p>Checks whether users have a Gravatar avatar associated with their email address. If a Gravatar exists, it displays the avatar image. If not, it shows the user’s initials instead.</p>
<h4>What data is sent</h4>
<p>An MD5 hash of the user’s email address is sent to Gravatar’s servers via a HEAD request. The actual email address is NOT sent – only its hash.</p>
<h4>When data is sent</h4>
<ul>
<li>When displaying user avatars in the Bublz interface (ticket views, Kanban board)</li>
<li>When users access their avatar preference settings</li>
</ul>
<h4>User control</h4>
<p>Users can avoid Gravatar entirely by selecting “Initial” or “Custom Avatar” in their Bublz preferences (Bublz > Preferences).</p>
<h4>Service provider</h4>
<p>Gravatar is provided by Automattic Inc.<br />
* Terms of Service: https://automattic.com/tos/<br />
* Privacy Policy: https://automattic.com/privacy/</p>
<h3>Development</h3>
<p>This plugin includes source code and build configuration. The compiled assets in <code>dist/</code> are built from source files in <code>src/</code> using Vite.</p>
<p>To build from source:</p>
<ol>
<li>Run <code>npm install</code></li>
<li>Run <code>npm run build</code></li>
</ol>


Supernifty Bublz

Click anything on your site. Pin a task to it. Track it on a kanban board. Bug reporting and feedback built into WordPress.

Patrick Schlesinger

<p><strong>PagePin</strong> gives WordPress agencies and developers two tools for client feedback and bug reporting — <strong>Pinshots</strong> for screenshot-based bug reports and <strong>Pinpoints</strong> for DOM-based comment threads. Self-hosted, GDPR compliant, no cloud dependencies.</p>
<h4>Pinshots — Bug Reporting</h4>
<p>Screenshot-based feedback with visual markers. Place numbered markers anywhere on the page, add notes, and capture everything in a single screenshot. Perfect for quick bug reports, design reviews, and client feedback rounds.</p>
<ul>
<li><strong>Three Marker Types</strong> — Negative (red) for bugs, Positive (green) for approvals, Note (orange) for comments</li>
<li><strong>One-Click Screenshots</strong> — Capture the current page instantly with all markers included</li>
<li><strong>Email Delivery</strong> — Send feedback with screenshot attachment to up to 5 recipients</li>
<li><strong>Custom Watermark</strong> — Brand every screenshot with your own text</li>
<li><strong>Adjustable Compression</strong> — Image quality from 10% to 100%</li>
<li><strong>Undo/Redo</strong> — Ctrl+Z / Ctrl+Y to undo and redo marker placements</li>
<li><strong>Drag & Drop</strong> — Reposition markers by dragging them to the correct location</li>
</ul>
<h4>Pinpoints — Client Feedback</h4>
<p>DOM-based comment threads attached directly to page elements — like Google Docs comments, but for your live website. Comments persist even when the page layout changes, making it ideal for ongoing collaboration and iterative design feedback.</p>
<ul>
<li><strong>Element-Attached Threads</strong> — Click any element to start a comment thread on it</li>
<li><strong>Smart Element Matching</strong> — Comments survive layout changes through CSS selectors, content fingerprinting, and multi-signal scoring</li>
<li><strong>@Mentions</strong> — Mention team members or external guests in comments to notify them</li>
<li><strong>Resolve & Reopen</strong> — Mark threads as resolved and reopen them when needed</li>
<li><strong>Sidebar Overview</strong> — All pinpoints listed in a slide-out sidebar with unread badges</li>
<li><strong>Visual Indicators</strong> — Numbered badges on the page show where pinpoints are attached</li>
<li><strong>Tag System</strong> — Organize pinpoints with custom colored tags (Bug, Design, Content, Urgent, or your own)</li>
</ul>
<h4>How It Works</h4>
<ol>
<li><strong>Pin</strong> — Press Ctrl+Alt+F (or click the floating button) and click anywhere on your site</li>
<li><strong>Capture</strong> — Screenshot, element position, and browser context are captured automatically</li>
<li><strong>Ship</strong> — Feedback is delivered to your inbox or discussed in a pinpoint thread</li>
</ol>
<h4>Key Features</h4>
<p><strong>Screenshots & Markers</strong></p>
<ul>
<li>Three annotation tools with automatic numbering</li>
<li>Keyboard shortcuts: Ctrl+Alt+F to activate, keys 1/2/3 for tool selection</li>
<li>Customizable floating feedback button with inactivity auto-hide</li>
<li>Dual screenshot engines (html2canvas and html-to-image)</li>
<li>Touch support for tablets and mobile devices</li>
</ul>
<p><strong>Collaboration</strong></p>
<ul>
<li><strong>External Collaborators</strong> — Invite anyone via Magic Link email or shareable URL (no WordPress account needed)</li>
<li><strong>Collaborator Reuse</strong> — Grant existing guests access to additional pinpoints without creating new links</li>
<li><strong>@Mention Notifications</strong> — Mention collaborators in comments to send email notifications with Magic Link access</li>
<li><strong>Auto-Grant Access</strong> — Mentioning a collaborator automatically grants them access if they don’t have it yet</li>
<li><strong>Share Modal</strong> — Internal link for team members, external sharing with guest dropdown or new guest creation</li>
<li><strong>Thread Notifications</strong> — All thread participants (including collaborators) are notified of new comments</li>
<li><strong>Configurable Link Expiry</strong> — Set Magic Links to expire after 7, 30, or 90 days</li>
</ul>
<p><strong>Admin & Management</strong></p>
<ul>
<li>Admin dashboard with feedback statistics and quick links</li>
<li>Feedback overview with status filters (New, Sent, Resolved) and bulk actions</li>
<li>Post/Page metabox showing pinpoint count per content</li>
<li>Admin bar integration with live feedback counter badge</li>
<li>Collaborator management with type display, inline email editing, and access control</li>
<li>Tag management with custom colors and usage statistics</li>
<li>8-step setup wizard for first-time configuration</li>
</ul>
<p><strong>Security & Access Control</strong></p>
<ul>
<li>Role-based access — control who can create, view, and resolve feedback</li>
<li>Granular pinpoint permissions (create, view, resolve per role)</li>
<li>Spam protection: honeypot, submission timing, rate limiting with escalation</li>
<li>Optional CAPTCHA: reCAPTCHA v2/v3, hCaptcha, Cloudflare Turnstile</li>
<li>Rate limit escalation (5 min <span aria-hidden="true" class="wp-exclude-emoji">→</span> 15 min <span aria-hidden="true" class="wp-exclude-emoji">→</span> 1 hour <span aria-hidden="true" class="wp-exclude-emoji">→</span> 6 hours <span aria-hidden="true" class="wp-exclude-emoji">→</span> 24 hours)</li>
</ul>
<p><strong>Privacy & Standards</strong></p>
<ul>
<li>100% self-hosted — your server, your database, your data</li>
<li>GDPR compliant — no external calls unless CAPTCHA is enabled</li>
<li>Clean uninstall — all data removed when plugin is deleted</li>
<li>Multilingual — English and German included, translation-ready</li>
<li>WordPress Coding Standards (WPCS 3.0) and PHPStan Level 5</li>
</ul>
<h4>Use Cases</h4>
<ul>
<li><strong>Web Agencies</strong> — Collect and manage client feedback across projects</li>
<li><strong>Developers</strong> — QA testing, bug reporting, and code review workflows</li>
<li><strong>Support Teams</strong> — Visual bug reports from users with full context</li>
<li><strong>Design Reviews</strong> — Attach comments to specific design elements for iterative feedback</li>
<li><strong>Content Teams</strong> — Request page changes with visual annotations</li>
<li><strong>Client Onboarding</strong> — Share feedback links with clients who don’t have WordPress accounts</li>
</ul>
<h4>Public Feedback Mode</h4>
<p>Enable public feedback to allow website visitors (even without login) to submit visual feedback. Protected by multiple spam prevention measures:</p>
<ul>
<li>Honeypot fields</li>
<li>Submission timing checks</li>
<li>Rate limiting per IP and session</li>
<li>Optional CAPTCHA (reCAPTCHA v2/v3, hCaptcha, Cloudflare Turnstile)</li>
</ul>
<p>For more information visit <a href="https://pagepin.io" rel="nofollow ugc">pagepin.io</a></p>
<h3>Support</h3>
<ul>
<li>Website: <a href="https://pagepin.io" rel="nofollow ugc">pagepin.io</a></li>
<li>Support: service@pagepin.io</li>
</ul>
<h3>Third Party Services</h3>
<p>This plugin connects to external services ONLY when you explicitly enable CAPTCHA protection:</p>
<h4>Google reCAPTCHA (v2 or v3)</h4>
<p>When enabled, user interaction data is sent to Google for spam verification.<br />
* Service: https://www.google.com/recaptcha/<br />
* Privacy Policy: https://policies.google.com/privacy<br />
* Terms of Service: https://policies.google.com/terms</p>
<h4>hCaptcha</h4>
<p>When enabled, user interaction data is sent to hCaptcha for spam verification.<br />
* Service: https://www.hcaptcha.com/<br />
* Privacy Policy: https://www.hcaptcha.com/privacy<br />
* Terms of Service: https://www.hcaptcha.com/terms</p>
<h4>Cloudflare Turnstile</h4>
<p>When enabled, user interaction data is sent to Cloudflare for spam verification.<br />
* Service: https://www.cloudflare.com/products/turnstile/<br />
* Privacy Policy: https://www.cloudflare.com/privacypolicy/<br />
* Terms of Service: https://www.cloudflare.com/website-terms/</p>
<p><strong>Important:</strong> No data is sent to external services unless you explicitly enable CAPTCHA in the plugin settings. Without CAPTCHA, the plugin operates entirely on your own server.</p>
<h3>Privacy</h3>
<h4>Data Collection</h4>
<p>This plugin collects and stores the following data locally on your WordPress server:</p>
<p><strong>For authenticated users (logged-in):</strong><br />
* User ID (WordPress user reference)<br />
* Feedback content (screenshots, markers, messages)<br />
* Page URL where feedback was submitted<br />
* Timestamp</p>
<p><strong>For public/anonymous feedback (when enabled):</strong><br />
* Email address (if provided by the visitor)<br />
* IP address (for rate limiting only)<br />
* Session token (anonymous identifier)<br />
* Feedback content (screenshots, markers, messages)<br />
* Page URL and timestamp</p>
<p><strong>For external collaborators (when enabled):</strong><br />
* Display name<br />
* Email address (optional, for Magic Link invitations and @mention notifications)<br />
* Authentication token (for session-based access)<br />
* Access grants (which pinpoints the collaborator can view)<br />
* Last access timestamp</p>
<h4>Data Retention</h4>
<ul>
<li><strong>Feedback data:</strong> Stored until manually deleted by an administrator</li>
<li><strong>Rate limiting data (IP/Session):</strong> Automatically deleted after 24 hours</li>
<li><strong>Screenshots:</strong> Stored until feedback is deleted</li>
<li><strong>Collaborator data:</strong> Stored until manually deleted by an administrator</li>
</ul>
<h4>Data Location</h4>
<ul>
<li>Database: WordPress database tables (prefixed with your WordPress table prefix)</li>
<li>Screenshots: <code>/wp-content/uploads/pagepin/</code> directory</li>
</ul>
<h4>GDPR Compliance</h4>
<ul>
<li>All data is stored locally on your server</li>
<li>No analytics or tracking is performed</li>
<li>No data is shared with third parties (unless CAPTCHA is enabled)</li>
<li>Data can be exported and deleted upon request via WordPress admin</li>
<li>IP addresses are pseudonymized after rate limit period</li>
</ul>
<h4>Consent</h4>
<p>For public feedback mode, we recommend:<br />
* Linking to your privacy policy in the feedback form<br />
* Enabling the GDPR consent checkbox in plugin settings<br />
* Informing visitors about data collection in your site’s privacy policy</p>


PagePin – Client Feedback & Bug Reporting

Pin it. Ship it. Visual feedback infrastructure for WordPress.

Supernifty Bublz vs PagePin – Client Feedback & Bug Reporting