v1.2.0

This release establishes FE Search AI's Zero Data Retention posture — the site does not store conversation content by default, every server-side record class has a configurable retention period and a delete action, and uninstall cleanup is verified by tests — and refreshes the chat window with a redesigned options overlay and customizable bubble colors.

Privacy

• Added a dedicated Privacy tab with a live summary of active external services and server-side retention
• Added persistent frontend disclosure of active AI services and browser storage, plus versioned consent integration for Pro
• Added suggested Privacy Policy content through the WordPress Privacy Policy guide
• Marked which external services receive visitor input; operational endpoints (GitHub update check) are shown to admins only

Zero Data Retention

• Exposed the conversation history sanitizer as a shared entry point so REST/MCP integrations apply the same PII masking as the chat UI
• Extended system log filtering so response bodies and message payloads can never be persisted
• Rate-limit counters now use a salted HMAC of the IP; diagnostic-only logging no longer transmits answer text
• Added a Retrieval Trace Persistence toggle with configurable retention and a delete action

Chat UI

• Reworked the options menu into a full-size scrollable overlay with grouped controls and clearer privacy notices
• Made the Bubble Color configurable with optional gradient (start/end colors and angle) and a fixed animation, applied to the floating bubble and send button
• Derived the chat input background from the window color so it stays distinguishable in light, dark, and custom schemes
• Added a footer notice under the input area, a draggable input resizer, and a consent menu item that only appears when consent is enabled

Bug Fixes

• Fixed "Delete Data on Uninstall" never taking effect; it now removes all six plugin tables, options, transients, and hashed-IP counters
• Fixed the Log Retention setting, which was displayed but never saved or applied; it now drives system log rotation
• Fixed versioned consent failing when an administrator's locale differs from the site locale, by excluding translated presentation fields from the consent version hash (previously issued consent tokens are invalidated once)

Documentation

• Added a Zero Data Retention statement, data processing map, and complete external endpoint list to docs/privacy.md (EN/JA)
• Noted that Anthropic Covered Models (Claude Fable 5.1 / 5, Mythos 5.1 / 5) require 30-day retention and are not ZDR-eligible

What's Changed

• deps(deps-dev): bump wp-phpunit/wp-phpunit from 7.0.2 to 7.1.0 in the composer-development group by @dependabot[bot] in #75
• deps(deps): bump dompurify from 3.4.13 to 3.4.14 by @dependabot[bot] in #76
• deps(deps): bump postcss-selector-parser by @dependabot[bot] in #77
• deps(deps-dev): bump browserslist from 4.28.2 to 4.28.8 by @dependabot[bot] in #78
• deps(deps-dev): bump fast-uri from 3.1.5 to 3.1.7 by @dependabot[bot] in #79
• deps(deps-dev): bump js-yaml from 3.14.1 to 3.15.2 by @dependabot[bot] in #81
• deps(deps): bump ws from 7.5.10 to 7.5.13 by @dependabot[bot] in #82
• deps(deps-dev): bump http-proxy-middleware from 2.0.9 to 2.0.10 by @dependabot[bot] in #83
• deps(deps-dev): bump joi from 18.2.1 to 18.2.8 by @dependabot[bot] in #84
• deps(deps-dev): bump svgo from 3.3.4 to 3.3.5 by @dependabot[bot] in #85
• deps(deps-dev): bump the npm-development group across 1 directory with 5 updates by @dependabot[bot] in #86
• deps(deps): bump dompurify from 3.4.14 to 3.4.15 by @dependabot[bot] in #87
• deps(deps-dev): bump adm-zip from 0.6.0 to 0.6.1 by @dependabot[bot] in #88
• deps(deps-dev): bump @babel/core from 7.28.5 to 7.29.7 by @dependabot[bot] in #89
• Fix CI ERESOLVE errors by migrating to ESLint flat config by @dxd5001 in #90
• deps(deps-dev): bump wp-phpunit/wp-phpunit from 7.1.0 to 7.1.1 in the composer-development group by @dependabot[bot] in #91
• deps(deps-dev): bump the npm-development group with 2 updates by @dependabot[bot] in #92
• Stop tracking .devin directory (environment-specific config) by @firstelementjp in #93
• deps(deps-dev): bump the npm-development group with 3 updates by @dependabot[bot] in #94
• deps(deps): bump dompurify from 3.4.15 to 3.4.16 by @dependabot[bot] in #95
• Release v1.2.0: Privacy/ZDR controls, consent opt-in, and chat UI redesign by @dxd5001 in #96
• Standardize Japanese ZDR wording as ゼロデータ保持 by @dxd5001 in #97
• Prepare release v1.2.0 — privacy tab, Zero Data Retention posture, chat UI refresh by @dxd5001 in #98
• Update documents by @firstelementjp in #99
• Exclude eslint.config.mjs from release archives by @dxd5001 in #100
• Update WordPress tested-up-to to 7.1.2 by @dxd5001 in #101
• Use input background for user message bubble and rename Bubble Color label by @dxd5001 in #102

Full Changelog: v1.1.2...v1.2.0