About this plugin
Reuse rich answers and ordered groups on pages and products. Shared edits update fresh supported placements; cached pages may need refreshing.
Free includes:
- Guided setup, native editing, answer revisions and a reusable library without paid quotas.
- Ordered groups, FAQ topics and keyboard-accessible selection.
- Page and product-context blocks, shortcodes and WooCommerce product FAQ tabs.
- Direct product, category/tag and store-wide group assignments.
- Accordion, cards and list layouts, inline search, question links and expand/collapse controls.
- Authenticated previews, versioned JSON/CSV exchange and reviewed ZIP bundles.
- Optional Elementor widgets and local page-cache integrations.
- Read-only migration from Easy Accordion FREE 3.1.10 classic custom-content accordions; other sources and existing placements need manual work.
Page FAQs need neither WooCommerce nor Elementor. Product tools need WooCommerce; widgets need Elementor. ZIP bundles need PHP zip; JSON/CSV does not.
Dependencies are not installed automatically.
org. It contains rules, exceptions, simulations, coverage, bulk execution and activity tools. Free publishing requires no vendor account, payment or licence key.
External services
CatalogFAQ has no vendor API, telemetry endpoint, payment API, remote licence check or external update server. Its PHP, JavaScript, CSS and icons are local. It uses WordPress-provided editor libraries.
Product and GPL licence-information links are ordinary links, not background API requests.
Content you choose to embed
External media is optional. Adding an external embed URL to an answer can cause WordPress’s oEmbed system to contact that URL’s host and its discovered or registered provider when the answer is edited, previewed or rendered. This can occur for an unpublished draft.
The provider receives the media URL and server request information, including the server IP address and WordPress HTTP user agent; URLs can contain information you put in them. A failed or subsequently filtered embed can still have caused a provider request. Do not put secrets or private signed URLs in an answer.
An allowed player, image, audio or video URL in the resulting answer can also make the viewer’s browser contact that host. The host receives the resource URL, viewer IP address, browser information and any referrer/cookies the browser permits. Provider assets, cookies or analytics are separate from this plugin’s own behavior.
This plugin does not implement a visitor media-consent banner or a click-to-load blocker. Use local media or ordinary links if external loading is unwanted, or configure your site’s consent system before publishing remote media.
The renderer permits HTTPS player iframes only for these services:
- YouTube (www.youtube.com and www.youtube-nocookie.com): selected video playback. Terms and Privacy.
- Vimeo (player.vimeo.com): selected video playback. Terms and Privacy.
- Dailymotion (www.dailymotion.com): selected video playback. Terms and Privacy.
The iframe allowlist is an output filter, not a list of every server request: WordPress oEmbed discovery and author-selected media can use other hosts. The host/provider depends on the URL you or an importer select, and site extensions can change WordPress providers. Review that provider’s terms and privacy notice before adding its URL.
See WordPress embeds. No provider key or provider registration is needed for ordinary local FAQ publishing.
APIs and local integrations
Your local WordPress REST API handles choices, previews, cache status and jobs (catalog-faq/v1), and FAQ/topic editing (wp/v2). Requests contain IDs, searches, settings, drafts or commands, protected by cookie authentication, nonces and management/object permissions. php with action nonces.
These are not vendor services.
WooCommerce, WordPress blocks/posts/meta/options/cron, Elementor and cache-plugin hooks run locally. Cache adapters do not call CDN/vendor purge APIs. WordPress, hosting and other plugins have their own behavior.
Privacy and stored data
The plugin itself does not collect visitor analytics, read customer/order records or send site data to its vendor. This does not prevent author-selected media from contacting its provider as described above.
WordPress stores content/revisions, topics, groups, assignments, settings, per-user setup/help choices and private import/index/job records. These can include actor IDs, site origin, mappings and before/after content. Authorized exports download selected content/configuration to the administrator; exports and backups need separate protection.
Finished job journals become cleanup candidates after 90 days by default and only after their revert window expires. Unfinished jobs, retained import plans and content can remain. Cleanup is bounded and depends on WordPress scheduled tasks running; expiry is not a guaranteed deletion time.
Content export is not a personal-data export of all operational history.
Deactivation and default uninstall preserve data. An administrator may enable deletion under Import / export after reviewing the inventory. That cleanup deletes the listed Free content/configuration and shared job records; it does not erase all WordPress user metadata, original source-plugin records, existing page content, backups or Pro-specific configuration.
Remove remaining administrative traces separately when needed. Uninstall stops Free’s scheduled tasks.
Source and licence
Readable PHP, JavaScript and CSS are included; no compilation is required. txt. The Free installer excludes the website, tests and Pro code.