-
Notifications
You must be signed in to change notification settings - Fork 0
External Services
GT Performance works entirely on your server by default and sends no data anywhere. There is no telemetry, no account, no licence check in the WordPress.org build, and the plugin never contacts servers of its own.
Each integration below contacts a third party only after you enable it, and only with credentials you supply.
Contacted only when you connect your own Cloudflare account to manage its cache rule and purge its cache.
Sends: the API token or Global API Key and account email you saved, your zone identifier or domain, the compiled cache-rule expression, and the exact URLs being purged. When: connecting, synchronizing, running diagnostics, purging, and automatically when a content change requires an edge purge. Provider: Cloudflare, Inc. — Terms · Privacy
Contacted only when you connect a site hosted on xCloud using your own xCloud API token.
Sends: that token and your site's domain or xCloud identifier. When: connecting or refreshing the integration, and when host-level caches are purged. Provider: xCloud by WPDeveloper — Privacy
Contacted only when you enable local Google Fonts hosting on a site whose theme or plugins already load Google Fonts. Your server downloads the stylesheet and font files once and serves them from your own domain afterwards.
The download is a server-side request carrying no visitor data, and the feature removes your visitors' browser requests to Google entirely. Provider: Google LLC — Privacy · Google Fonts privacy notes
Involved only on pages where you have already embedded a YouTube video and the lightweight embed option is on. The visitor's browser loads the thumbnail from i.ytimg.com, and the player loads from the privacy-enhanced youtube-nocookie.com domain only after the visitor clicks play.
Your server sends nothing to YouTube. Without this option the standard embed contacts YouTube earlier and more broadly. Provider: Google LLC — Terms · Privacy
Cache warming, purge verification and Safety Lab checks send requests to your own URLs. Those never leave your domain.
GT Performance stores script hostname patterns such as connect.facebook.net, googletagmanager.com, google-analytics.com, clarity.ms and hotjar.com.
These are exclusion rules, not connections. They are compared against the script URLs your own site already loads, so those scripts are never minified, deferred or delayed. GT Performance never contacts these hosts, sends them no data, and adds no script to your site that would.
GT Performance · GPL-2.0-or-later · Issues and pull requests welcome
Getting started
Caching
Optimization
Delivery
Operations
Reference