> How the ThimPress Course Review plugin for LearnPress handles reviewer data, WordPress comment cookies, transfers and GDPR obligations for course platforms. > > Canonical: https://www.flowconsent.com/en/services/marketing/thimpress-course-review Marketing # ThimPress Course Review Unclassified · [Official website](https://wordpress.org/plugins/learnpress-course-review) ThimPress Course Review is a WordPress plugin that adds a star rating and review system to LearnPress courses. Reviews are stored in the site's own WordPress database; no tracking cookies are set by default. [Block ThimPress Course Review until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=marketing) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Marketing](https://www.flowconsent.com/en/services/marketing) - Consent Unclassified - Prior consent Not required - Documented cookies 7 - Third-party domains 6 - Servers Host website infrastructure (defined by the WordPress hosting provider, no separate ThimPress servers involved for review storage) Overview ## What does ThimPress Course Review do? ## **What is ThimPress Course Review** ThimPress Course Review is an add on for the LearnPress learning management system on WordPress, published by ThimPress, a Vietnamese vendor. It lets enrolled students leave a star rating and a written review on each course, and displays the average rating on course pages. The plugin runs entirely on the WordPress site and does not introduce any external tracking script. ## **Data collected and cookies set** The plugin stores the review content, the star rating, the author's name and email and the timestamp in the WordPress database. By default no marketing or analytics cookies are set. When a logged out visitor leaves a review, WordPress may write the standard comment\_author cookies (name, email, website URL) to pre fill the next review form. These functional cookies are usually considered strictly necessary for the requested feature. ## **GDPR and ePrivacy assessment** Reviewer data is personal data under Article 4(1) GDPR. The most appropriate legal basis is legitimate interests (Article 6(1)(f)): the site operator has a legitimate interest in showing reviews, and the data subject has voluntarily submitted them. If reviews are linked to identified students, you may also rely on the performance of a contract (Article 6(1)(b)). The functional WordPress cookies fall under the strictly necessary exemption of Article 5(3) ePrivacy. ## **International data transfers** The plugin does not itself send review data to ThimPress. Transfers only arise from the WordPress hosting environment, for instance a US based shared host, a CDN that caches review pages or a backup service outside the EEA. Plugin update and licence checks may connect to ThimPress in Vietnam, which is a third country without an adequacy decision; SCCs are required for that flow. ## **Practical implementation steps** Inform reviewers in your privacy notice that their name, email and review content will be stored and published. Offer access, rectification and erasure on request and, where appropriate, anonymise old reviews. Map the WordPress host and any CDN or backup providers, sign data processing agreements with them and document the legal basis chosen for reviews in your record of processing. Compliance ## ThimPress Course Review and the GDPR - Legal basis Legitimate interests (GDPR Art 6(1)(f)) for displaying course reviews submitted voluntarily by users, balanced against reviewer rights. The WordPress comment\_author cookies that remember the reviewer's name and email are functional and may rely on the strictly necessary exemption of ePrivacy Art 5(3) when limited to that purpose. - Risk level low - Applicable regulations GDPR, ePrivacy Directive, UK GDPR, PECR, LOPDGDD, LGPD ### Impact assessment (DPIA) A full DPIA is rarely required because the plugin processes a limited set of voluntary personal data (name, email, review content, rating). Document the categories of data, retention, the location of the WordPress hosting, any backups and how reviewers can exercise their rights of access, rectification and erasure. ### Sample text for your banner > When you submit a course review, your name, email and the content of your review are stored on this site so we can display the review and contact you if needed. By default your browser may remember your name and email to make future reviews easier; you can clear this at any time. Cookies and trackers ## What ThimPress Course Review sets and contacts - Tracking method WordPress plugin running server side on the host site. Stores course reviews and ratings in the site's own database. No tracking cookies are set by default; only the standard WordPress comment\_author cookies are written when a logged out visitor submits a review. - Server location Host website infrastructure (defined by the WordPress hosting provider, no separate ThimPress servers involved for review storage) - Cookieless mode available Yes ### Cookies set (7) | Name | Type | Duration | Purpose | | ------------------------------ | ------------ | -------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | comment\_author\_{HASH} | first\_party | 347 days | Standard WordPress cookie that remembers the reviewer's name to pre fill the next review form. Only written when an unauthenticated visitor submits a review with the option enabled. | | comment\_author\_email\_{HASH} | first\_party | 347 days | Standard WordPress cookie that remembers the reviewer's email address for future review forms on the same site. | | comment\_author\_url\_{HASH} | first\_party | 347 days | Standard WordPress cookie that remembers the reviewer's website URL for future review forms on the same site. | | wordpress\_logged\_in\_\* | first\_party | session | Standard WordPress authentication cookie used to identify the logged in learner submitting a course review. | | wp\_settings\_\* | first\_party | 1 year | Stores WordPress user interface preferences for the dashboard and review form, scoped to the WordPress user ID. | | wp\_lp\_session | first\_party | session | LearnPress session cookie used to track the current learner activity while completing or reviewing a course. | | lp\_review\_submitted | first\_party | 30 days | Marks that the learner has recently submitted a review for a given course, preventing duplicate submissions. | ### Third-party domains contacted (6) - `thimpress.com` - `api.thimpress.com` - `license.thimpress.com` - `thimpress.com` - `api.thimpress.com` - `license.thimpress.com` Questions ## Frequently asked questions about ThimPress Course Review Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### Which cookies does the plugin set? The plugin itself does not set tracking cookies. When a logged out visitor submits a review, WordPress may write the standard comment\_author\_\*, comment\_author\_email\_\* and comment\_author\_url\_\* cookies for around a year so the form can be pre filled on later visits. These are functional cookies for a feature the user has actively requested. ### Do I need user consent before activating reviews? No banner level consent is required to display reviews or to store them in your WordPress database, because legitimate interests and contract performance can cover that processing. You should however inform reviewers about the processing in your privacy notice and, where the optional WordPress comment cookies are written, treat them as strictly necessary functional cookies. ### What is the appropriate legal basis under the GDPR? Legitimate interests under Article 6(1)(f) is the most common basis for publishing voluntarily submitted reviews. For reviews from logged in students who agreed to your terms, performance of the contract under Article 6(1)(b) can also apply. The functional cookies rely on the strictly necessary exemption of Article 5(3) of the ePrivacy Directive. ### Where is data sent and what about US transfers? Reviews stay in the WordPress database controlled by you. Transfers to third countries only happen because of your hosting choices, for instance a US shared host, a global CDN that caches pages, or backup software that stores copies abroad. Plugin updates and licence checks may also connect to ThimPress in Vietnam. ### Do I need a DPIA? A full DPIA is rarely required because the processing is limited in scope and based on data the user has freely provided. A short legitimate interests assessment is usually enough. Run a full DPIA only if you combine reviews with broader profiling, sentiment analysis or large scale public sharing of identifiable students. ### How do I implement the review feature compliantly? Add a clear notice next to the review form explaining what data will be stored, who will see it and for how long. Allow users to request deletion or anonymisation, and configure your WordPress comments policy accordingly. If your hosting or CDN is outside the EEA, document the transfer mechanism. ### What are the main alternatives to ThimPress Course Review? For LearnPress and other WordPress LMS solutions, alternatives include native WordPress comments, third party review systems such as WP Customer Reviews or Site Reviews, or LMS specific add ons from LifterLMS and Tutor LMS. All raise similar privacy questions and rely on first party storage of reviewer data. ### How should I update my cookie policy? Add a section describing the WordPress comment\_author cookies, their purpose (remembering reviewer details), duration and classification as strictly necessary functional cookies. If you use a CDN or external host that sets its own cookies, document those separately. Reference the privacy policy section that describes how reviews are stored and published. Same category ## More services: Marketing [See the whole category](https://www.flowconsent.com/en/services/marketing) ### [Pabbly Form Builder](https://www.flowconsent.com/en/services/marketing/pabbly-form-builder) [Pabbly Form Builder is a form building and data collection platform that helps businesses create professional online forms, surveys, and questionnaires without coding. It offers a drag-and-drop builder, conditional logic, file uploads, and payment collection. Pabbly Form Builder integrates with CRM, email marketing, and productivity tools to automate workflows triggered by submissions. With responsive designs and spam protection, Pabbly Form Builder helps capture leads and collect data securely.](https://www.flowconsent.com/en/services/marketing/pabbly-form-builder) [Marketing](https://www.flowconsent.com/en/services/marketing/pabbly-form-builder) · ### [Creaitor](https://www.flowconsent.com/en/services/marketing/creaitor) [Creaitor is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. Creaitor integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, Creaitor makes advanced AI accessible to all teams.](https://www.flowconsent.com/en/services/marketing/creaitor) [Marketing](https://www.flowconsent.com/en/services/marketing/creaitor) · ### [FormDr](https://www.flowconsent.com/en/services/marketing/formdr) [FormDr is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. FormDr supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, FormDr ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/marketing/formdr) [Marketing](https://www.flowconsent.com/en/services/marketing/formdr) · ### [Capterra](https://www.flowconsent.com/en/services/marketing/capterra) [Capterra is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Capterra provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Capterra helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/marketing/capterra) [Marketing](https://www.flowconsent.com/en/services/marketing/capterra) · ### [Yandex Webmaster](https://www.flowconsent.com/en/services/marketing/yandex-webmaster) [Yandex Webmaster is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. Yandex Webmaster is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, Yandex Webmaster offers reliable solutions that scale with organizational needs and evolving web standards.](https://www.flowconsent.com/en/services/marketing/yandex-webmaster) [Marketing](https://www.flowconsent.com/en/services/marketing/yandex-webmaster) · ### [Cartera](https://www.flowconsent.com/en/services/marketing/cartera) [Cartera is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Cartera supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Cartera ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/marketing/cartera) [Preferences](https://www.flowconsent.com/en/services/marketing/cartera) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)