Footfall Reviews – Widgets for Google Reviews & Review Collection

Google connection happens on Footfall Reviews, not inside WordPress. Footfall receives the Google account authorisation needed to list managed Business Profile locations and sync their reviews. Google access and refresh credentials are not sent to or stored by this plugin.

On a public page containing a Footfall widget, the browser requests the published widget identifier, configuration, business name, separately labelled ratings and selected review content from Footfall Reviews. To provide installation detection and aggregate intelligence, the widget sends the widget identifier, event type (load, viewable impression, navigation, expansion or link click), website hostname and broad device class. It does not send the visitor’s name, email, IP address or a persistent visitor identifier, and it sets no analytics cookie.

Once the site is connected, every public page loads the Footfall overlays script (https://footfallreviews.com/api/public/overlays.js) with the connected business identifier. It requests which overlays (popup, sticky banner, floating bubble) are switched on, their timing settings and a sample of published reviews. When an overlay is shown, opened, clicked or closed, it sends the event type, overlay type, page hostname and path; no cookies, IP addresses or visitor identifiers are stored. Overlay choices are remembered in the visitor’s browser storage only to respect the chosen frequency. Disconnecting the plugin stops the script loading.

The plugin does not send usage reports or contact Footfall on activation, upgrade, on a schedule or in the background.

Before connecting, choosing “Use design” sends only the chosen design name to https://footfallreviews.com/api/public/demo-widget to create a demo shortcode. Demo widgets show labelled sample reviews and expire after 30 days unless claimed. No site or personal data is sent.

Footfall Reviews terms: https://footfallreviews.com/legal/terms Footfall Reviews privacy policy: https://footfallreviews.com/legal/privacy Google privacy policy: https://policies.google.com/privacy Google terms: https://policies.google.com/terms

Source Code

All JavaScript and CSS in this plugin is hand-written and unminified; there is no build step. The readable files are included at admin/js/ffrat-admin.js, admin/css/ffrat-admin.css and blocks/widget/index.js. The files with a version and checksum in their name (for example ffrat-admin.1.3.0.abc123.js) are byte-for-byte copies of those files, renamed only so caches that ignore ?ver= still load the new release.