Privacy
Last updated 21 October 2026.
What this service handles
When you connect WP Publisher, you enter your WordPress website addresses, usernames and Application Passwords. They are encrypted (AES-256-GCM) into the connection token that ChatGPT keeps for you. This server has no database and does not store them, or anything else about you.
If “Remember these websites in this browser” is ticked, the same encrypted details are also kept in a secure, HttpOnly cookie in your own browser for up to 180 days, only so the sign-in page can list them the next time you connect. Untick it when you connect to delete the cookie.
On each request, the token is decrypted in memory, the request is sent to your website over HTTPS, and the result goes back to ChatGPT. Images you ask to upload are held in a temporary file for the length of that one request, then deleted.
What is logged
The hosting platform keeps short operational logs: time, the path called, the status code and duration. Post content, images, passwords and website responses are never logged.
Sharing
Nothing is sold or shared. Your content goes only between ChatGPT and your own websites.
Control
Disconnect WP Publisher in ChatGPT to remove the connection. Revoke the Application Password in WordPress (Users → Profile → Application Passwords) to cut off access immediately, whatever happens to the token.
Contact
Jayant Solanki, thejayant.in/#contact.