Privacy and external services
Hive is built for the GDPR: it logs little, keeps it for a limited time, anonymises early and makes no request to anyone unless you switch the Community Network on. This page lists what is stored, every request that leaves the site, the privacy tools and what an uninstall removes.
What is stored on your site
- Security log: address, event type, severity and details of failed sign-ins, blocked requests and other events; the user agent only while "Log user agents" is on, cut to 50 characters. Kept 30 days by default, address and user agent anonymised after 7 days.
- Block list, whitelist and counters per address, with their end dates.
- Report queue: reports waiting for the community, in the Community Network only.
- 2FA data in the user's meta: TOTP secret and, with the Pro add-on, the phone number, both encrypted (libsodium, OpenSSL as fallback); passkeys as public keys; recovery codes and trusted devices as hashes.
- With the Pro add-on on Business: the audit trail with the acting user and the affected object, 90 days by default, secrets never written.
Hive sets no tracking cookies and loads no tracking pixel. The charts and the QR code library ship inside the plugin; nothing comes from a CDN.
What leaves the site
In Local Shield nothing does, not even with a key stored. Only a click on Check in the quickstart or on Test Connection sends one key check.
In the Community Network, and only with a Community Access Key you entered, the plugin talks to
https://reportedip.com/wp-json/reportedip/v2/. Every request carries the key, the site address and a
user agent with the plugin and WordPress version.
| Request | When | What is sent |
|---|---|---|
verify-key | When you check the key, then every six hours | Key; receives plan and quotas |
check | Sign-in attempts, comments, sign-ups, password resets | The address being checked |
report | For an address the plugin blocked, in batches | Address, event category, one-line description with site name, site address and attempt count |
whitelist | An address you mark as legitimate | The address, as positive feedback |
categories | Occasionally | Nothing; receives the category list |
notification-config | Only with "Sync alert recipients" on | The alert recipient addresses of the site |
rules/<ruleset> | Every six hours | Nothing; receives signed rulesets |
| News feed | Dashboard, cached 12 hours | Nothing; receives the reportedip.com news |
User names, passwords, form contents and comment texts never leave the site.
- Have I Been Pwned, only with the breach check switched on: the first five characters of the SHA-1 hash of a new password go to
api.pwnedpasswords.com, never the password. - Your server's DNS resolver: verified bot detection resolves the host name of a visitor that claims to be a crawler. Results are cached up to 24 hours.
- With the Pro add-on: relayed mails go to reportedip.com with recipient and content; an SMS code with the phone number and the digits. The add-on asks reportedip.com for updates with the key. Group bans and fleet management use the same service.
Privacy tools in WordPress
Hive registers an exporter and an eraser, so Tools → Export Personal Data and Erase Personal Data include its records for the requested person: log rows, trusted devices and, with the add-on, audit rows. It also adds a suggested paragraph to the privacy policy guide under Settings → Privacy. The legal basis is the protection of the site, Art. 6(1)(f) GDPR.
Your privacy policy
Mention that the site uses Hive and processes addresses for its security. In the Community Network also mention that attacking addresses, the event category and the time go to reportedip.com, together with the site address and the plugin version. The privacy generator in your account writes a passage you can paste. The service itself is described in the privacy policy of reportedip.com.
Uninstalling
Deactivating changes no data. An uninstall keeps tables and settings as well, so a reinstall picks up where the site left off, unless Tools → Data → Uninstall behaviour → Delete all plugin data on uninstall is on; then every table and option of Hive goes. Reports already in the community stay there; how an address is removed is explained on IP delisting.
Last updated: · Maintained by the ReportedIP team