About this plugin
Vinceweb Shopping Lists provides simple shared-device shopping lists without requiring every person to have a WordPress account.
Create separate lists for different people, protect each list with an optional PIN, and let shoppers plan and complete a trip from a phone, tablet, or desktop.
Features include:
- Multiple separate shopping-list profiles.
- Optional PIN access without a WordPress login.
- Persistent products that remain available for future trips.
- Saved price and quantity for estimating the next shop.
- Editable store-location buttons such as Fruit & Veg, Grocery, Bakery, Chilled, and Frozen.
- Custom ordering of store locations to match the route through a shop.
- Shopping mode with an “In basket” action.
- Per-shop basket, remaining, and estimated totals.
- Product and price editing while shopping.
- Catalogue-first product picker while shopping, with duplicate protection.
- Shop-specific normal and sale prices with persistent sale information.
- Shopping history, 12-month insights, and CSV export.
- Print only the items currently selected.
- Administrator-only profile and store-location management.
- Products are not deleted when an item is placed in the basket.
- No external services, tracking, advertising, or remote APIs.
Use the shortcode:
[vinceweb_shopping_list]
For existing installations, the previous [my_shopping_list] and [mothers_shopping_list] shortcodes remain supported as compatibility aliases.
Privacy
The plugin stores shopping-list profile names, hashed PINs, product names, quantities, prices, store locations, selection state, and shopping state in the local WordPress database.
When a profile is opened, the plugin sets HTTP-only cookies that remember the profile for up to 180 days. The cookies contain a profile identifier and a site-specific authentication token. PINs are stored as WordPress password hashes and are not stored in plain text.
To reduce repeated PIN guessing, failed PIN attempts are temporarily rate-limited using a short-lived transient keyed from a one-way hash of the connecting IP address.
No shopping-list information is transmitted to external services by this plugin.