About this plugin
Footfall Reviews gives business owners a native WordPress widget library, secure Footfall account connection, Google Business Profile location selection, custom colours and review controls, a shortcode, and a Gutenberg block.
Browse the designs before connecting. When you choose to connect, sign-in, account creation and Google permission happen securely on Footfall Reviews. Your Footfall password and Google credentials never enter WordPress.
Features:
- Full widget library including sliders, grids, lists, badges, floating and Retro designs.
- Google, Footfall or separately labelled combined views.
- Review rating, order, quantity, reviewer photo, size and brand-colour controls.
- [footfall_reviews id="your-widget-id"] shortcode and dynamic Gutenberg block.
- Cookieless aggregate impressions and clicks with real website detection.
- Overlays with no shortcodes: a review popup, sticky review banner and floating review bubble, switched on from the plugin.
- Links to Widget Intelligence, the Footfall review portal and QR products.
Google authorisation is needed only to find Business Profiles you manage, let you select locations and sync their reviews. Footfall does not change your Google listing, post reviews for customers or combine Google and Footfall ratings.
External Services
This plugin connects to Footfall Reviews, operated by AutoThink, only after an administrator explicitly starts account connection or places a Footfall widget.
Account pairing sends the WordPress site URL, hostname, site name, selected widget template, a one-time pairing verifier and a randomly generated scoped connection token. It is sent when the administrator clicks “Sign in or create account”. The token is stored only as a secure hash by Footfall; the original remains in the WordPress options table until disconnected.
Connected administration requests send the scoped connection token and requested widget action. Widget settings can include selected review source and locations, star filters, ordering, review limit, pinned review identifiers, headings, display toggles, dimensions, spacing, colours, typography, borders, animation and image preferences. These fields are sent only when the administrator loads, saves, publishes, duplicates, pauses or archives widgets.
Google connection happens on Footfall Reviews, not inside WordPress. Footfall receives the Google account authorisation needed to list managed Business Profile locations and sync their reviews. Google access and refresh credentials are not sent to or stored by this plugin.
On a public page containing a Footfall widget, the browser requests the published widget identifier, configuration, business name, separately labelled ratings and selected review content from Footfall Reviews. To provide installation detection and aggregate intelligence, the widget sends the widget identifier, event type (load, viewable impression, navigation, expansion or link click), website hostname and broad device class.
It does not send the visitor’s name, email, IP address or a persistent visitor identifier, and it sets no analytics cookie.
js) with the connected business identifier. It requests which overlays (popup, sticky banner, floating bubble) are switched on, their timing settings and a sample of published reviews. When an overlay is shown, opened, clicked or closed, it sends the event type, overlay type, page hostname and path; no cookies, IP addresses or visitor identifiers are stored.
Overlay choices are remembered in the visitor’s browser storage only to respect the chosen frequency. Disconnecting the plugin stops the script loading.
The plugin does not send usage reports or contact Footfall on activation, upgrade, on a schedule or in the background.
com/api/public/demo-widget to create a demo shortcode. Demo widgets show labelled sample reviews and expire after 30 days unless claimed. No site or personal data is sent.
com/legal/terms
com/legal/privacy
com/privacy
com/terms
Source Code
All JavaScript and CSS in this plugin is hand-written and unminified; there is no build step. js. ver= still load the new release.