Which of my blog and personal data is being transfered when WordPress automatically checks for updates?

1 Views

I’m generally concerned about privacy and I’ve heard that with each contact to the WordPress API for update checks and similar a lot of my blogs data is being transfered.

To get a better impression, I’d like to more specifically know which data is being transfered and when.

Read More

What’s done with the information and who has access to the information? How long is it stored?

I found no information about that in the packages readme nor on the worpdress.org website so far.

Post Views: 1

Related posts

Leave a Reply

2 comments

  1. This does not answer the question in specific, but those are some resources regarding the question (feel free to add stuff).

    Blog Articles and Discussions

    WP core resources and Trac Tickets

    1. WordPress.org Privacy Policy
    2. Trac tickets
    3. Core code snippets

    Code Stubs

    Questions regarding Akismet, Facebook and other Add-Ons alike that deal with personal data

    • Blogs making use of third-party tools should check the current legal situation regarding data protection while making a third-party dealing with user-input.
    • Can you as a blog owner ensure that you can fulfill your blogs users rights on their data? Like document to whom you sent their data and how to deal with deletion requests on your behalf?

    International/Country specific Resources and Pointers

  2. Calls from core to api.wordpress.org (wp 3.2.1)

    From the phpDoc blocks:

    Inside head of wp_update_themes(): “A list of all themes installed in sent to WP.“

    1. Themes
      /wp-includes/update.php > line 261-267, called on line 280 [1].

    2. Plugins /wp-includes/update.php > line 166-172, called on line 184

    3. Core /wp-includes/update.php > starting on line 22 [3]

    [1]

    $options = array(
    'timeout' => ( ( defined('DOING_CRON') && DOING_CRON ) ? 30 : 3),
    'body'          => array( 'themes' => serialize( $themes ) ),
    'user-agent'    => 'WordPress/' . $wp_version . '; ' . get_bloginfo( 'url' )
);
$raw_response = wp_remote_post( 'http://api.wordpress.org/themes/update-check/1.0/', $options );
set_site_transient( 'update_themes', $new_update );

    [2]

    $options = array(
    'timeout' => ( ( defined('DOING_CRON') && DOING_CRON ) ? 30 : 3),
    'body' => array( 'plugins' => serialize( $to_send ) ),
    'user-agent' => 'WordPress/' . $wp_version . '; ' . get_bloginfo( 'url' )
);

$raw_response = wp_remote_post('http://api.wordpress.org/plugins/update-check/1.0/', $options);

    [3] 

    $options = array(
    'timeout' => ( ( defined('DOING_CRON') && DOING_CRON ) ? 30 : 3 ),
    'user-agent' => 'WordPress/' . $wp_version . '; ' . home_url( '/' ),
    'headers' => array(
        'wp_install' => $wp_install,
        'wp_blog' => home_url( '/' )
    )
);

$response = wp_remote_get($url, $options);