PagePin – Client Feedback & Bug Reporting vs Tuft Feedback

PagePin gives WordPress agencies and developers two tools for client feedback and bug reporting — Pinshots for screenshot-based bug reports and Pinpoints for DOM-based comment threads. Self-hosted, GDPR compliant, no cloud dependencies. Pinshots — Bug Reporting Screenshot-based feedback with visual markers. Place numbered markers anywhere on the page, add notes, and capture everything in a single screenshot. Perfect for quick bug reports, design reviews, and client feedback rounds. Three Marker Types — Negative (red) for bugs, Positive (green) for approvals, Note (orange) for comments One-Click Screenshots — Capture the current page instantly with all markers included Email Delivery — Send feedback with screenshot attachment to up to 5 recipients Custom Watermark — Brand every screenshot with your own text Adjustable Compression — Image quality from 10% to 100% Undo/Redo — Ctrl+Z / Ctrl+Y to undo and redo marker placements Drag & Drop — Reposition markers by dragging them to the correct location Pinpoints — Client Feedback DOM-based comment threads attached directly to page elements — like Google Docs comments, but for your live website. Comments persist even when the page layout changes, making it ideal for ongoing collaboration and iterative design feedback. Element-Attached Threads — Click any element to start a comment thread on it Smart Element Matching — Comments survive layout changes through CSS selectors, content fingerprinting, and multi-signal scoring @Mentions — Mention team members or external guests in comments to notify them Resolve & Reopen — Mark threads as resolved and reopen them when needed Sidebar Overview — All pinpoints listed in a slide-out sidebar with unread badges Visual Indicators — Numbered badges on the page show where pinpoints are attached Tag System — Organize pinpoints with custom colored tags (Bug, Design, Content, Urgent, or your own) How It Works Pin — Press Ctrl+Alt+F (or click the floating button) and click anywhere on your site Capture — Screenshot, element position, and browser context are captured automatically Ship — Feedback is delivered to your inbox or discussed in a pinpoint thread Key Features Screenshots & Markers Three annotation tools with automatic numbering Keyboard shortcuts: Ctrl+Alt+F to activate, keys 1/2/3 for tool selection Customizable floating feedback button with inactivity auto-hide Dual screenshot engines (html2canvas and html-to-image) Touch support for tablets and mobile devices Collaboration External Collaborators — Invite anyone via Magic Link email or shareable URL (no WordPress account needed) Collaborator Reuse — Grant existing guests access to additional pinpoints without creating new links @Mention Notifications — Mention collaborators in comments to send email notifications with Magic Link access Auto-Grant Access — Mentioning a collaborator automatically grants them access if they don’t have it yet Share Modal — Internal link for team members, external sharing with guest dropdown or new guest creation Thread Notifications — All thread participants (including collaborators) are notified of new comments Configurable Link Expiry — Set Magic Links to expire after 7, 30, or 90 days Admin & Management Admin dashboard with feedback statistics and quick links Feedback overview with status filters (New, Sent, Resolved) and bulk actions Post/Page metabox showing pinpoint count per content Admin bar integration with live feedback counter badge Collaborator management with type display, inline email editing, and access control Tag management with custom colors and usage statistics 8-step setup wizard for first-time configuration Security & Access Control Role-based access — control who can create, view, and resolve feedback Granular pinpoint permissions (create, view, resolve per role) Spam protection: honeypot, submission timing, rate limiting with escalation Optional CAPTCHA: reCAPTCHA v2/v3, hCaptcha, Cloudflare Turnstile Rate limit escalation (5 min → 15 min → 1 hour → 6 hours → 24 hours) Privacy & Standards 100% self-hosted — your server, your database, your data GDPR compliant — no external calls unless CAPTCHA is enabled Clean uninstall — all data removed when plugin is deleted Multilingual — English and German included, translation-ready WordPress Coding Standards (WPCS 3.0) and PHPStan Level 5 Use Cases Web Agencies — Collect and manage client feedback across projects Developers — QA testing, bug reporting, and code review workflows Support Teams — Visual bug reports from users with full context Design Reviews — Attach comments to specific design elements for iterative feedback Content Teams — Request page changes with visual annotations Client Onboarding — Share feedback links with clients who don’t have WordPress accounts Public Feedback Mode Enable public feedback to allow website visitors (even without login) to submit visual feedback. Protected by multiple spam prevention measures: Honeypot fields Submission timing checks Rate limiting per IP and session Optional CAPTCHA (reCAPTCHA v2/v3, hCaptcha, Cloudflare Turnstile) For more information visit pagepin.io Support Website: pagepin.io Support: [email protected] Third Party Services This plugin connects to external services ONLY when you explicitly enable CAPTCHA protection: Google reCAPTCHA (v2 or v3) When enabled, user interaction data is sent to Google for spam verification. * Service: https://www.google.com/recaptcha/ * Privacy Policy: https://policies.google.com/privacy * Terms of Service: https://policies.google.com/terms hCaptcha When enabled, user interaction data is sent to hCaptcha for spam verification. * Service: https://www.hcaptcha.com/ * Privacy Policy: https://www.hcaptcha.com/privacy * Terms of Service: https://www.hcaptcha.com/terms Cloudflare Turnstile When enabled, user interaction data is sent to Cloudflare for spam verification. * Service: https://www.cloudflare.com/products/turnstile/ * Privacy Policy: https://www.cloudflare.com/privacypolicy/ * Terms of Service: https://www.cloudflare.com/website-terms/ Important: No data is sent to external services unless you explicitly enable CAPTCHA in the plugin settings. Without CAPTCHA, the plugin operates entirely on your own server. Privacy Data Collection This plugin collects and stores the following data locally on your WordPress server: For authenticated users (logged-in): * User ID (WordPress user reference) * Feedback content (screenshots, markers, messages) * Page URL where feedback was submitted * Timestamp For public/anonymous feedback (when enabled): * Email address (if provided by the visitor) * IP address (for rate limiting only) * Session token (anonymous identifier) * Feedback content (screenshots, markers, messages) * Page URL and timestamp For external collaborators (when enabled): * Display name * Email address (optional, for Magic Link invitations and @mention notifications) * Authentication token (for session-based access) * Access grants (which pinpoints the collaborator can view) * Last access timestamp Data Retention Feedback data: Stored until manually deleted by an administrator Rate limiting data (IP/Session): Automatically deleted after 24 hours Screenshots: Stored until feedback is deleted Collaborator data: Stored until manually deleted by an administrator Data Location Database: WordPress database tables (prefixed with your WordPress table prefix) Screenshots: /wp-content/uploads/pagepin/ directory GDPR Compliance All data is stored locally on your server No analytics or tracking is performed No data is shared with third parties (unless CAPTCHA is enabled) Data can be exported and deleted upon request via WordPress admin IP addresses are pseudonymized after rate limit period Consent For public feedback mode, we recommend: * Linking to your privacy policy in the feedback form * Enabling the GDPR consent checkbox in plugin settings * Informing visitors about data collection in your site’s privacy policy

Tuft adds a floating button to every page on your site. When clicked, it enters a targeting mode that lets the visitor click any element on the page to annotate it. The plugin captures the DOM selector, click coordinates, viewport dimensions, form field state, and an in-browser screenshot, then presents a drawing toolbar so the reviewer can mark up the screenshot before typing their feedback. Everything is stored locally as a custom post type for admin review. Key features Click-to-annotate — click the “Feedback” button then click any element. The hovered element highlights so you know exactly what you’re selecting. In-browser screenshots — uses html2canvas (bundled with the plugin, no CDN dependency) to capture the visible viewport at the moment of submission. Freehand canvas annotation — a drawing toolbar below the screenshot preview lets reviewers draw freehand strokes or rectangles, undo the last stroke, or clear all marks. Annotations are baked into the submitted JPEG on the client. Context capture — records the CSS selector, viewport-relative click coordinates, viewport dimensions, and any visible form field values (passwords excluded). Feedback modal — clean overlay collects the visitor’s feedback text alongside the annotated screenshot. Logged-in users are not prompted for name or email — their WordPress account details are used automatically. Guest visitors see name and email fields. Widget visibility controls — choose who sees the feedback button: everyone (including logged-out visitors), logged-in users only, editors and above, or administrators only. Configured under Settings → Tuft Feedback. Submission rate limiting — cap submissions per IP address per hour to protect against spam. Set to 0 to disable. Tracked via post meta queries. Built-in notifications — email a comma-separated list of addresses and/or POST a JSON payload to any number of webhook URLs on every submission. Works with Slack incoming webhooks, Discord, Teams, Zapier, Make, and any HTTP endpoint. Local storage — submissions saved as a tuft_feedback custom post type with full metadata and a screenshot attachment. Admin review — list table with columns for feedback text, source page, element selector, submitter, and screenshot thumbnail. Full detail view with screenshot in the post editor. Alpaca Issue Tracker integration — if Alpaca Issue Tracker is installed, each submission is automatically mirrored as a Kanban issue on the Alpaca board. The Tuft admin menu moves under the Alpaca Project Board menu. Intended use This plugin is designed for local development and staging environments where you want clients or team members to leave visual design notes without logging in to a project management tool. The widget visibility setting under Settings → Tuft Feedback controls who sees the button; the REST endpoint that receives submissions is open by default — review the security notes before deploying to a publicly accessible production site. Alpaca Issue Tracker integration When Alpaca Issue Tracker is active alongside Tuft: Each submission creates a matching alpaca_issue in your board’s default (lowest-score) column. Issues are tagged with the submitter’s browser and the type “Tuft” for easy filtering. The Tuft admin menu moves under the Project Board submenu, so the Alpaca board becomes the primary triage interface. Click any row in the Tuft list to open the full detail view including the annotated screenshot.