Sign inDocsBlogAboutSupportContact
Docs

Security and your data

Where TrueCommander runs, what it stores, and the few times anything leaves your site. Stated plainly.

4 min read Trust

TrueCommander provides a desktop wp-admin workspace and commands that can affect content, users, public pages, and configured integrations. Review the scope of each command before running it.

Admin workspace and public-site effects

Navigator is intended for authorized users in desktop wp-admin. The full plugin also records visitor activity from public-page WordPress hooks by default. Enabled tracking tags, access walls, custom snippets, and social login can add public-facing behavior.

Do not assume zero frontend activity or a fixed performance score. Effects depend on enabled features, data size, traffic, caching, and hosting.

Visitor recording and optional tracking

The plugin includes local visitor-activity recording and optional integrations with analytics providers. External analytics tags run when configured. Review your consent setup and privacy notices before enabling them.

What leaves your site, and when

Honesty matters more than a tidy slogan, so these are the main categories of outbound requests:

  • Licensing and updates — to activate, validate, and check for new versions, the plugin talks to the TruePlugins license server. This is the normal licensing handshake, and it carries your license key and which site is asking, not your content.
  • AI Commands: the request and command-specific site data can pass through TruePlugins to its AI provider. Depending on the command this can include post text, product details, prices, or review excerpts, as well as authentication and request metadata.

Configured integrations: API calls, tracking tags, social login, SMTP, and other commands can contact the services you select. This is not limited to licensing and AI.

Built on WordPress core

The plugin uses WordPress APIs and bundled libraries for PDF generation, QR codes, tables, charts, search, and the interface. Some commands need WooCommerce, PHP GD, credentials, mail transport, or an external service.

Your data is yours

Settings, commands, macros, and execution receipts are stored in the WordPress database; generated files can also be stored on the site. Exports are per module and do not replace a site backup. Restrict access to code, recipient data, logs, and credentials.

Deactivation preserves durable configuration. Deletion follows the declared ownership rules and preserves shared or separately owned resources. The last shared TrueCommander installation attempts license-seat release; offline deletion needs manual account cleanup.

Frequently asked questions

Your site, your rules

Admin tools with explicit site-facing behavior

Use supported commands from wp-admin, and review what each enabled feature changes for visitors.

Cookies. The short version.

Essential cookies keep the cart and theme working. Analytics only fire if you say yes. Read our policy.