Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
WP Courseware is a WordPress LMS (Learning Management System) plugin that enables course creators to build, sell, and manage online courses directly on their WordPress site. It tracks student enrollment, course progress, quiz scores, and completion certificates. As a self-hosted plugin, all data remains on the WordPress hosting infrastructure.
WP Courseware is a WordPress LMS plugin enabling online course creation, student enrollment, progress tracking, and quiz management. Data is stored in the WordPress database on the hosting infrastructure. As a self-hosted plugin, the website owner is the data controller.
WP Courseware stores student email addresses, enrollment records, quiz scores, and course completion data. This data must be handled with a lawful basis (contract performance for paid courses), documented in your RoPA, and subject to data subject rights including access and erasure. Implement retention policies for student data.
Update privacy policy to describe student data collection and processing. Implement student account deletion on request. Define retention periods for course completion data. Sign DPAs with hosting provider and payment processor. For paid courses, the contract performance basis covers enrollment data processing.
Websites using WP Courseware must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA may be required when WP Courseware is used for large-scale educational platforms, when courses process sensitive topics, or when detailed learner profiling is performed.
Sample consent text
This learning platform uses WP Courseware to manage courses and track your progress. Your enrollment and progress data is stored on our servers. See our privacy policy for full details.
Third-party domains contacted
www.wpcourseware.comflyplugins.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| wordpress_logged_in_* | functionality | Session | Standard WordPress authentication cookie that identifies the logged in user for course access and progress tracking. |
| wpcw_progress | functionality | Session | Tracks course unit completion and quiz progress within the current browsing session. |
| wpcw_cart | functionality | 7 days | Stores course purchase cart contents when WP Courseware is integrated with an e-commerce checkout. |
| wpcw_nonce | security | Session | WordPress nonce cookie providing CSRF protection for course enrollment and quiz submission forms. |
WP Courseware collects user analytics data — you legally need a consent banner. Try FlowConsent free.
WP Courseware is a WordPress learning management system plugin that sets cookies for student session management, course progress tracking, and quiz state persistence. It inherits WordPress session cookies and may set additional cookies for enrollment tracking, drip content scheduling, and completion status.
Cookies strictly necessary for the enrolled student experience, such as session and progress tracking for logged in users, may be exempt from consent. However, if WP Courseware integrates with analytics tools, payment gateways, or marketing platforms that set additional cookies, those require prior consent.
For enrolled students, contractual necessity under Article 6(1)(b) GDPR applies to processing needed to deliver the course. Session cookies are strictly necessary. Analytics, marketing integrations, and non essential tracking require consent under Article 6(1)(a). Progress tracking for enrolled students falls under the contract.
WP Courseware itself runs on your WordPress server, so data stays where you host it. However, integrated payment processors (Stripe, PayPal), email services, or video hosting platforms may transfer student data outside the EEA. Audit each integration and ensure appropriate transfer safeguards are in place.
A DPIA is recommended if your WP Courseware implementation processes student data at scale, includes automated grading that affects learner outcomes, or handles minors' data (courses for children). Standard adult education courses with limited enrollment may not require a formal DPIA.
Add a privacy notice to your enrollment process explaining what student data is collected and why. Configure WordPress cookie consent to cover WP Courseware's cookies. Implement data retention policies for completed courses. Ensure students can request access to or deletion of their learning records.
Other WordPress LMS plugins with good privacy features include LearnDash, Tutor LMS, and LifterLMS. For maximum privacy control, Moodle is a self hosted open source LMS with extensive GDPR compliance tools built in. Evaluate each option's data processing practices and third party integrations.
List all WP Courseware cookies including session management, course progress, quiz state, and any integration related cookies. Categorize them as strictly necessary (session, progress) or optional (analytics, marketing). Include durations and specify they are first party cookies set by your WordPress installation.