Social Publisher

Social Publisher is a GDPR-compliant WordPress plugin for automatic posting on LinkedIn – directly when publishing a post. It is ideal for agencies, editorial teams, and B2B marketing teams who want to save time and appear more professional.

To ensure GDPR compliance, the LinkedIn OAuth connection is routed through a neutral, tracking-free proxy domain. This avoids direct requests to LinkedIn from the user’s browser and prevents personal data leakage.

Why Social Publisher?

• Publish your posts directly to LinkedIn upon saving – no copy & paste, no separate tool
• Use custom texts and images for each post – perfect for tailored LinkedIn posts
• Choose between personal profile or company page
• Works seamlessly with Advanced Custom Fields (ACF) – even in the free version
• GDPR-compliant – OAuth connection via a central, tracking-free proxy domain
• Easy to use – no technical knowledge required

The Pro version is in preparation – with support for Facebook and Instagram as well as additional professional features.

External Services

This plugin connects to the official LinkedIn API to authenticate users and publish content. Below is a list of all external services used, including what data is transmitted and under which conditions.

LinkedIn (https://www.linkedin.com and https://api.linkedin.com)

The plugin integrates with LinkedIn to allow users to publish posts from WordPress to their LinkedIn profile or company page.

Purpose:
– Authenticate a LinkedIn account via OAuth 2.0
– Fetch basic profile information
– Publish posts (text and image) on behalf of the user

Data transmitted:
– During OAuth: The plugin sends the client_id and redirect_uri to LinkedIn.
– After authorization: A temporary authorization code is exchanged for an access token.
– When publishing: The plugin sends the post content (title, text, optional image URL) and the target profile or organization ID.

When is data sent?
– Only after the user explicitly connects their LinkedIn account and enables auto-posting.
– Publishing occurs only when the “Share on LinkedIn” option is checked in the post edit screen.

Endpoints used:
– https://www.linkedin.com/oauth/v2/authorization
– https://www.linkedin.com/oauth/v2/accessToken
– https://api.linkedin.com/v2/userinfo
– https://api.linkedin.com/v2/me
– https://api.linkedin.com/v2/ugcPosts
– https://api.linkedin.com/v2/assets?action=registerUpload
– https://api.linkedin.com/media/upload
– https://api.linkedin.com/v2/assets?action=registerUpload
– https://api.linkedin.com/v2/userinfo
– https://api.linkedin.com/v2/me
– https://social-publisher.enfants.de/oauth/start
– https://social-publisher.enfants.de/oauth/start?state=linkedin_auth_
– https://social-publisher.enfants.de/wp-json/social-publisher/v1/linkedin/callback

Proxy Service (https://social-publisher.enfants.de)

This service is used as a neutral GDPR-compliant proxy for handling the LinkedIn OAuth handshake.

Purpose:
– Relay OAuth 2.0 communication securely between WordPress and LinkedIn
– Avoid direct browser connections to LinkedIn for better GDPR compliance

Data transmitted:
– Temporary authorization codes
– Access tokens (only during the runtime of authentication)
– Selected LinkedIn profile URNs

When is data sent?
– Only during the OAuth authorization process initiated by the user
– No data is stored after completion of the process

Privacy Policy: https://social-publisher.enfants.de/privacy/
Terms of Use: https://social-publisher.enfants.de/terms-of-service/

Privacy Policy: https://www.linkedin.com/legal/privacy-policy
Terms of Use: https://www.linkedin.com/legal/user-agreement

No tracking, analytics, or unsolicited data is sent to LinkedIn. All calls are made directly or via an optional GDPR-compliant proxy provided by the plugin author.

Proxy and GDPR

To ensure compliance with the General Data Protection Regulation (GDPR), Social Publisher does not communicate directly with LinkedIn from the WordPress admin interface.

Instead, all OAuth-related requests are routed through a separate proxy server (https://connect.enfants.de), which acts as a neutral relay between WordPress and LinkedIn. This prevents any tracking or third-party cookies from being injected into the WordPress backend.

The proxy server does not store any personal data, credentials, or tokens beyond the runtime of the connection. The connection is end-to-end encrypted and uses short-lived access tokens granted by LinkedIn.

This architecture ensures maximum privacy and a GDPR-compliant integration of LinkedIn into your WordPress website.