PagePin – Client Feedback & Bug Reporting

Description

PagePin gives WordPress agencies and developers two tools for client feedback and bug reporting — Pinshots for screenshot-based bug reports and Pinpoints for DOM-based comment threads. Self-hosted, GDPR compliant, no cloud dependencies.

Pinshots — Bug Reporting

Screenshot-based feedback with visual markers. Place numbered markers anywhere on the page, add notes, and capture everything in a single screenshot. Perfect for quick bug reports, design reviews, and client feedback rounds.

• Three Marker Types — Negative (red) for bugs, Positive (green) for approvals, Note (orange) for comments
• One-Click Screenshots — Capture the current page instantly with all markers included
• Email Delivery — Send feedback with screenshot attachment to up to 5 recipients
• Custom Watermark — Brand every screenshot with your own text
• Adjustable Compression — Image quality from 10% to 100%
• Undo/Redo — Ctrl+Z / Ctrl+Y to undo and redo marker placements
• Drag & Drop — Reposition markers by dragging them to the correct location

Pinpoints — Client Feedback

DOM-based comment threads attached directly to page elements — like Google Docs comments, but for your live website. Comments persist even when the page layout changes, making it ideal for ongoing collaboration and iterative design feedback.

• Element-Attached Threads — Click any element to start a comment thread on it
• Smart Element Matching — Comments survive layout changes through CSS selectors, content fingerprinting, and multi-signal scoring
• @Mentions — Mention team members or external guests in comments to notify them
• Resolve & Reopen — Mark threads as resolved and reopen them when needed
• Sidebar Overview — All pinpoints listed in a slide-out sidebar with unread badges
• Visual Indicators — Numbered badges on the page show where pinpoints are attached
• Tag System — Organize pinpoints with custom colored tags (Bug, Design, Content, Urgent, or your own)

How It Works

1. Pin — Press Ctrl+Alt+F (or click the floating button) and click anywhere on your site
2. Capture — Screenshot, element position, and browser context are captured automatically
3. Ship — Feedback is delivered to your inbox or discussed in a pinpoint thread

Key Features

Screenshots & Markers

• Three annotation tools with automatic numbering
• Keyboard shortcuts: Ctrl+Alt+F to activate, keys 1/2/3 for tool selection
• Customizable floating feedback button with inactivity auto-hide
• Dual screenshot engines (html2canvas and html-to-image)
• Touch support for tablets and mobile devices

Collaboration

• External Collaborators — Invite anyone via Magic Link email or shareable URL (no WordPress account needed)
• Collaborator Reuse — Grant existing guests access to additional pinpoints without creating new links
• @Mention Notifications — Mention collaborators in comments to send email notifications with Magic Link access
• Auto-Grant Access — Mentioning a collaborator automatically grants them access if they don’t have it yet
• Share Modal — Internal link for team members, external sharing with guest dropdown or new guest creation
• Thread Notifications — All thread participants (including collaborators) are notified of new comments
• Configurable Link Expiry — Set Magic Links to expire after 7, 30, or 90 days

Admin & Management

• Admin dashboard with feedback statistics and quick links
• Feedback overview with status filters (New, Sent, Resolved) and bulk actions
• Post/Page metabox showing pinpoint count per content
• Admin bar integration with live feedback counter badge
• Collaborator management with type display, inline email editing, and access control
• Tag management with custom colors and usage statistics
• 8-step setup wizard for first-time configuration

Security & Access Control

• Role-based access — control who can create, view, and resolve feedback
• Granular pinpoint permissions (create, view, resolve per role)
• Spam protection: honeypot, submission timing, rate limiting with escalation
• Optional CAPTCHA: reCAPTCHA v2/v3, hCaptcha, Cloudflare Turnstile
• Rate limit escalation (5 min → 15 min → 1 hour → 6 hours → 24 hours)

Privacy & Standards

• 100% self-hosted — your server, your database, your data
• GDPR compliant — no external calls unless CAPTCHA is enabled
• Clean uninstall — all data removed when plugin is deleted
• Multilingual — English and German included, translation-ready
• WordPress Coding Standards (WPCS 3.0) and PHPStan Level 5

Use Cases

• Web Agencies — Collect and manage client feedback across projects
• Developers — QA testing, bug reporting, and code review workflows
• Support Teams — Visual bug reports from users with full context
• Design Reviews — Attach comments to specific design elements for iterative feedback
• Content Teams — Request page changes with visual annotations
• Client Onboarding — Share feedback links with clients who don’t have WordPress accounts

Public Feedback Mode

Enable public feedback to allow website visitors (even without login) to submit visual feedback. Protected by multiple spam prevention measures:

• Honeypot fields
• Submission timing checks
• Rate limiting per IP and session
• Optional CAPTCHA (reCAPTCHA v2/v3, hCaptcha, Cloudflare Turnstile)

For more information visit pagepin.io

Support

• Website: pagepin.io
• Support: service@pagepin.io

Third Party Services

This plugin connects to external services ONLY when you explicitly enable CAPTCHA protection:

Google reCAPTCHA (v2 or v3)

When enabled, user interaction data is sent to Google for spam verification.
* Service: https://www.google.com/recaptcha/
* Privacy Policy: https://policies.google.com/privacy
* Terms of Service: https://policies.google.com/terms

hCaptcha

When enabled, user interaction data is sent to hCaptcha for spam verification.
* Service: https://www.hcaptcha.com/
* Privacy Policy: https://www.hcaptcha.com/privacy
* Terms of Service: https://www.hcaptcha.com/terms

Cloudflare Turnstile

When enabled, user interaction data is sent to Cloudflare for spam verification.
* Service: https://www.cloudflare.com/products/turnstile/
* Privacy Policy: https://www.cloudflare.com/privacypolicy/
* Terms of Service: https://www.cloudflare.com/website-terms/

Important: No data is sent to external services unless you explicitly enable CAPTCHA in the plugin settings. Without CAPTCHA, the plugin operates entirely on your own server.

Privacy

Data Collection

This plugin collects and stores the following data locally on your WordPress server:

For authenticated users (logged-in):
* User ID (WordPress user reference)
* Feedback content (screenshots, markers, messages)
* Page URL where feedback was submitted
* Timestamp

For public/anonymous feedback (when enabled):
* Email address (if provided by the visitor)
* IP address (for rate limiting only)
* Session token (anonymous identifier)
* Feedback content (screenshots, markers, messages)
* Page URL and timestamp

For external collaborators (when enabled):
* Display name
* Email address (optional, for Magic Link invitations and @mention notifications)
* Authentication token (for session-based access)
* Access grants (which pinpoints the collaborator can view)
* Last access timestamp

Data Retention

• Feedback data: Stored until manually deleted by an administrator
• Rate limiting data (IP/Session): Automatically deleted after 24 hours
• Screenshots: Stored until feedback is deleted
• Collaborator data: Stored until manually deleted by an administrator

Data Location

• Database: WordPress database tables (prefixed with your WordPress table prefix)
• Screenshots: /wp-content/uploads/pagepin/ directory

GDPR Compliance

• All data is stored locally on your server
• No analytics or tracking is performed
• No data is shared with third parties (unless CAPTCHA is enabled)
• Data can be exported and deleted upon request via WordPress admin
• IP addresses are pseudonymized after rate limit period

Consent

For public feedback mode, we recommend:
* Linking to your privacy policy in the feedback form
* Enabling the GDPR consent checkbox in plugin settings
* Informing visitors about data collection in your site’s privacy policy