"WPMU DEV operates a moderately-high privacy risk profile comparable to Google/Microsoft services, driven by extensive third-party data sharing (40+ vendors including advertisers and analytics), indefinite retention of user content and communications, and collection of sensitive location data through image EXIF metadata. The company discloses data to U.S. law enforcement and national security authorities without explicit user consent, and email marketing includes open/click tracking. However, the service provides meaningful opt-out options for targeted advertising and respects user deletion requests, placing it below the most aggressive data brokers but significantly above privacy-focused alternatives."
wpmudev Privacy Concerns & Scorecard
Data shared with 40+ third parties including advertising networks (Google AdSense, X, Facebook), analytics (Google Analytics, Mixpanel, Hotjar), marketing services, and embedded content providers with independent tracking capabilities
Collection of sensitive location data through EXIF GPS metadata in uploaded images, which is publicly accessible and can be extracted to map users to specific times and locations
Multiple cross-site tracking mechanisms including third-party analytics pixels, email open/click tracking, and targeted advertising pixels from Google, Facebook, and Twitter
Indefinite retention of published content, comments, and email/chat communications without standard deletion mechanisms or time limits
Users can opt-out of targeted advertising and request data deletion, but opt-outs require manual action across multiple platforms and do not guarantee complete data removal
No recommended actions at this time.
Automate your privacy
Connect your accounts to TrueTerms to automate these privacy actions and monitor policy changes.
Data Collection & Tracking
Personal Information Collected
Account creation, authentication, support, billing
Support, billing, marketing communications
Image metadata preservation, analytics
Service delivery, security, spam detection, analytics
Service improvement, support, marketing analytics, targeted advertising
Billing, accounting, legal compliance
Service administration, public directory
Customer support, service improvement
AI-powered support and features
Cross-Platform Tracking
WPMU DEV enables cross-site tracking through embedded content providers (Facebook, YouTube, Vimeo, Amazon) which independently track your behavior across their platforms. Visitors can correlate your uploaded media to your account using the REST API. Email tracking pixels and advertising pixels from Google, Facebook, and Twitter follow your activity across other websites.
Tracking Methods:
Cookies
Persistent cookies from LiveChatInc (3 years), commenter recognition (1 year), and various analytics/advertising cookies. Used to track visit history and tailor content
Tracking Pixels
Email tracking pixels in marketing messages to detect open and click activities. Advertising pixels from Google AdSense, DoubleClick, X (Twitter), and Facebook for cross-site behavioral tracking and retargeting
Analytics Code
Google Analytics, Mixpanel, Hotjar, and Sentry tracking code embedded on pages to monitor user behavior, session data, and error tracking
Embedded Third-Party Content
Embedded content from Amazon, Facebook, YouTube, Vimeo, and others that independently place cookies and track users across their platforms
API Correlation
REST API allows visitors to correlate uploaded media files to specific user accounts, enabling cross-reference of user identities
Gravatar
Profile pictures fetched from Gravatar, which can track profile picture views and link users across Gravatar-enabled sites
AI & Data Training
wpmudev does not train AI on your content
Based on their public policy, your content is not used to train AI models.
How to Object
No opt-out available
This service does not currently provide a public way to opt out of AI training.
Why We Analyzed wpmudev
TrueTerms automatically audits privacy policies and data practices using advanced machine learning to keep you informed and protected. This scorecard is based on the latest available public terms of service and privacy policies as of 2026.