FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Marketing

ThimPress Course Review

UnclassifiedOfficial website

ThimPress Course Review is a WordPress plugin that adds a star rating and review system to LearnPress courses. Reviews are stored in the site's own WordPress database; no tracking cookies are set by default.

Block ThimPress Course Review until consentScan my site
Overview

What does ThimPress Course Review do?

What is ThimPress Course Review

ThimPress Course Review is an add on for the LearnPress learning management system on WordPress, published by ThimPress, a Vietnamese vendor. It lets enrolled students leave a star rating and a written review on each course, and displays the average rating on course pages. The plugin runs entirely on the WordPress site and does not introduce any external tracking script.

Data collected and cookies set

The plugin stores the review content, the star rating, the author's name and email and the timestamp in the WordPress database. By default no marketing or analytics cookies are set. When a logged out visitor leaves a review, WordPress may write the standard comment_author cookies (name, email, website URL) to pre fill the next review form. These functional cookies are usually considered strictly necessary for the requested feature.

GDPR and ePrivacy assessment

Reviewer data is personal data under Article 4(1) GDPR. The most appropriate legal basis is legitimate interests (Article 6(1)(f)): the site operator has a legitimate interest in showing reviews, and the data subject has voluntarily submitted them. If reviews are linked to identified students, you may also rely on the performance of a contract (Article 6(1)(b)). The functional WordPress cookies fall under the strictly necessary exemption of Article 5(3) ePrivacy.

International data transfers

The plugin does not itself send review data to ThimPress. Transfers only arise from the WordPress hosting environment, for instance a US based shared host, a CDN that caches review pages or a backup service outside the EEA. Plugin update and licence checks may connect to ThimPress in Vietnam, which is a third country without an adequacy decision; SCCs are required for that flow.

Practical implementation steps

Inform reviewers in your privacy notice that their name, email and review content will be stored and published. Offer access, rectification and erasure on request and, where appropriate, anonymise old reviews. Map the WordPress host and any CDN or backup providers, sign data processing agreements with them and document the legal basis chosen for reviews in your record of processing.

Compliance

ThimPress Course Review and the GDPR

Legal basis
Legitimate interests (GDPR Art 6(1)(f)) for displaying course reviews submitted voluntarily by users, balanced against reviewer rights. The WordPress comment_author cookies that remember the reviewer's name and email are functional and may rely on the strictly necessary exemption of ePrivacy Art 5(3) when limited to that purpose.
Risk level
low
Applicable regulations
GDPR, ePrivacy Directive, UK GDPR, PECR, LOPDGDD, LGPD

Impact assessment (DPIA)

A full DPIA is rarely required because the plugin processes a limited set of voluntary personal data (name, email, review content, rating). Document the categories of data, retention, the location of the WordPress hosting, any backups and how reviewers can exercise their rights of access, rectification and erasure.

Sample text for your banner

When you submit a course review, your name, email and the content of your review are stored on this site so we can display the review and contact you if needed. By default your browser may remember your name and email to make future reviews easier; you can clear this at any time.
Cookies and trackers

What ThimPress Course Review sets and contacts

Tracking method
WordPress plugin running server side on the host site. Stores course reviews and ratings in the site's own database. No tracking cookies are set by default; only the standard WordPress comment_author cookies are written when a logged out visitor submits a review.
Server location
Host website infrastructure (defined by the WordPress hosting provider, no separate ThimPress servers involved for review storage)
Cookieless mode available
Yes

Cookies set (7)

NameTypeDurationPurpose
comment_author_{HASH}first_party347 daysStandard WordPress cookie that remembers the reviewer's name to pre fill the next review form. Only written when an unauthenticated visitor submits a review with the option enabled.
comment_author_email_{HASH}first_party347 daysStandard WordPress cookie that remembers the reviewer's email address for future review forms on the same site.
comment_author_url_{HASH}first_party347 daysStandard WordPress cookie that remembers the reviewer's website URL for future review forms on the same site.
wordpress_logged_in_*first_partysessionStandard WordPress authentication cookie used to identify the logged in learner submitting a course review.
wp_settings_*first_party1 yearStores WordPress user interface preferences for the dashboard and review form, scoped to the WordPress user ID.
wp_lp_sessionfirst_partysessionLearnPress session cookie used to track the current learner activity while completing or reviewing a course.
lp_review_submittedfirst_party30 daysMarks that the learner has recently submitted a review for a given course, preventing duplicate submissions.

Third-party domains contacted (6)

  • thimpress.com
  • api.thimpress.com
  • license.thimpress.com
  • thimpress.com
  • api.thimpress.com
  • license.thimpress.com
Questions

Frequently asked questions about ThimPress Course Review

Can't find your question? Write to us, we answer fast.

Which cookies does the plugin set?

The plugin itself does not set tracking cookies. When a logged out visitor submits a review, WordPress may write the standard comment_author_*, comment_author_email_* and comment_author_url_* cookies for around a year so the form can be pre filled on later visits. These are functional cookies for a feature the user has actively requested.

Do I need user consent before activating reviews?

No banner level consent is required to display reviews or to store them in your WordPress database, because legitimate interests and contract performance can cover that processing. You should however inform reviewers about the processing in your privacy notice and, where the optional WordPress comment cookies are written, treat them as strictly necessary functional cookies.

What is the appropriate legal basis under the GDPR?

Legitimate interests under Article 6(1)(f) is the most common basis for publishing voluntarily submitted reviews. For reviews from logged in students who agreed to your terms, performance of the contract under Article 6(1)(b) can also apply. The functional cookies rely on the strictly necessary exemption of Article 5(3) of the ePrivacy Directive.

Where is data sent and what about US transfers?

Reviews stay in the WordPress database controlled by you. Transfers to third countries only happen because of your hosting choices, for instance a US shared host, a global CDN that caches pages, or backup software that stores copies abroad. Plugin updates and licence checks may also connect to ThimPress in Vietnam.

Do I need a DPIA?

A full DPIA is rarely required because the processing is limited in scope and based on data the user has freely provided. A short legitimate interests assessment is usually enough. Run a full DPIA only if you combine reviews with broader profiling, sentiment analysis or large scale public sharing of identifiable students.

How do I implement the review feature compliantly?

Add a clear notice next to the review form explaining what data will be stored, who will see it and for how long. Allow users to request deletion or anonymisation, and configure your WordPress comments policy accordingly. If your hosting or CDN is outside the EEA, document the transfer mechanism.

What are the main alternatives to ThimPress Course Review?

For LearnPress and other WordPress LMS solutions, alternatives include native WordPress comments, third party review systems such as WP Customer Reviews or Site Reviews, or LMS specific add ons from LifterLMS and Tutor LMS. All raise similar privacy questions and rely on first party storage of reviewer data.

How should I update my cookie policy?

Add a section describing the WordPress comment_author cookies, their purpose (remembering reviewer details), duration and classification as strictly necessary functional cookies. If you use a CDN or external host that sets its own cookies, document those separately. Reference the privacy policy section that describes how reviews are stored and published.

Same category

More services: Marketing

See the whole category

Pabbly Form Builder

Pabbly Form Builder is a form building and data collection platform that helps businesses create professional online forms, surveys, and questionnaires without coding. It offers a drag-and-drop builder, conditional logic, file uploads, and payment collection. Pabbly Form Builder integrates with CRM, email marketing, and productivity tools to automate workflows triggered by submissions. With responsive designs and spam protection, Pabbly Form Builder helps capture leads and collect data securely.

Marketing

Creaitor

Creaitor is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. Creaitor integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, Creaitor makes advanced AI accessible to all teams.

Marketing

FormDr

FormDr is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. FormDr supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, FormDr ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Marketing

Capterra

Capterra is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Capterra provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Capterra helps deliver the right message to the right audience at the right time.

Marketing

Yandex Webmaster

Yandex Webmaster is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. Yandex Webmaster is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, Yandex Webmaster offers reliable solutions that scale with organizational needs and evolving web standards.

Marketing

Cartera

Cartera is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Cartera supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Cartera ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site