Clockdo helps WordPress site owners protect their publish date by generating a verifiable content timestamp.<\/p>\n\n
Clockdo creates a deterministic fingerprint (SHA-256) and requests an OpenTimestamps proof. Public posts use the public proof flow. Draft and private versions use a private, hash-only protocol and never send the title, author, URL, WordPress post ID, or post body. When full-text archive mode is enabled, every meaningful save in draft, pending, scheduled, private, or published state is first stored as an immutable local snapshot.<\/p>\n\n
English (Summary)\n* Generate per-post records and proof history in the dashboard.\n* Save proof artifacts to your WordPress uploads folder.\n* Optionally inject public meta tags and\/or a \"Verify\" footer link.\n* Proofs are designed to be independently verifiable with standard OpenTimestamps tools.<\/p>\n\n
This plugin may process and store locally:\n* WordPress post metadata (post ID, URL, timestamps),\n* immutable full-text snapshots containing post title, body, excerpt, slug, author ID, status, and audit timestamps when full-text archive mode is enabled,\n* deterministic hashes (SHA-256),\n* proof IDs\/statuses,\n* proof artifacts written to local disk under Outbound requests:\n* This plugin connects to a remote timestamping API (configured by you) to request proofs.\n* Full-text archive v3 submissions upload only a manifest commitment; the exact snapshot and post body remain in the local WordPress database. Public manifests may include already-public identity fields such as URL, title, author, and timestamps.\n* Legacy export workflows may upload Public disclosure:\n* If you enable meta injection or public verify links, your public pages may expose a hash\/canonicalization identifier and a verification link.<\/p>\n\n See the included docs (for operators):\n* This plugin connects to the following external services:<\/p>\n\n Clockdo Timestamping API<\/strong> ( Clockdo Verification Page<\/strong> ( All outbound connections are made via the WordPress HTTP API ( See also: Ordinary uninstall removes plugin settings, transient queue state, legacy batch tables, and mutable display metadata. It deliberately retains the immutable For irreversible full deletion, first make and verify a backup, then follow This plugin provides timestamping and verification tooling. It is not legal advice, not a certification service, and does not determine ownership.<\/p>\n\n\n No. This plugin creates a verifiable timestamp record. It does not register copyright or determine legal ownership.<\/p><\/dd>\n It provides independent timestamp evidence that may support your documentation process. Legal outcomes depend on jurisdiction and additional evidence.<\/p><\/dd>\n No. It proves that a specific fingerprint existed by a certain time (via an OTS proof). Ownership depends on broader evidence and jurisdiction.<\/p><\/dd>\n A SHA-256 fingerprint of a canonical representation of content and\/or a manifest that references it.<\/p><\/dd>\n Draft submissions and opted-in private-post submissions use a private protocol. The remote service receives a content hash plus protocol fields, but not the title, author, URL, WordPress post ID, or body. Private proof status and artifacts require the site's secret. Publishing the post later creates a separate public proof.<\/p><\/dd>\n In full-text archive mode, meaningful saves of draft, pending, scheduled, private, and published posts create immutable local versions and queue their corresponding hash proof. Actual publication of a scheduled or previously private post creates a separate public version. Autosaves, revisions, auto-drafts, trash changes, and no-change saves do not create versions. Sites outside full-text archive mode retain the legacy opt-in draft\/private submission behavior.<\/p><\/dd>\n Exact full-text snapshot bytes are stored in the WordPress database. Frozen manifest and The plugin applies restrictive directory\/file permissions and writes Apache deny rules. nginx does not read Meta tags do not duplicate content. If you enable a public footer link, consider wp-content\/uploads\/clockdo-ots-private\/<\/code>.<\/p>\n\nexport.json<\/code>, including post content when the operator explicitly enables that older combination of settings.\n* Private and draft submissions upload a hash-only manifest. They do not upload the title, author, URL, WordPress post ID, or post body.\n* A SHA-256 commitment is an integrity fingerprint, not encryption. It reveals when two committed snapshots are equal, and low-entropy content may be guessable by testing candidate text.<\/p>\n\nassets\/docs\/privacy.md<\/code>\n* assets\/docs\/third_party_services.md<\/code>\n* assets\/docs\/data_deletion_uninstall.md<\/code><\/p>\n\nThird Party Services<\/h3>\n\n
\n
ots-api.clockdo.com<\/code>)<\/p>\n\n\n
\/api\/v1\/public\/sites<\/code>, \/api\/v1\/public\/site-stamps<\/code>, \/api\/v1\/site\/me<\/code>, \/api\/v1\/proofs\/{proof_id}<\/code>, and authenticated manifest\/OTS artifact paths.<\/li>\nots-verify.clockdo.com<\/code>)<\/p>\n\n\n
wp_remote_post<\/code> \/ wp_remote_get<\/code>).\nThe API Base URL is configurable; the above domains are defaults.<\/p>\n\nassets\/docs\/third_party_services.md<\/code><\/p>\n\nUninstall<\/h3>\n\n
ots_post_snapshots<\/code> and ots_post_proofs<\/code> audit tables, including any full-text snapshots, and it may leave proof files under wp-content\/uploads\/clockdo-ots-private\/<\/code>.<\/p>\n\nassets\/docs\/data_deletion_uninstall.md<\/code> to remove the two retained tables and the private uploads directory explicitly.<\/p>\n\nDisclaimer<\/h3>\n\n
\n
\/wp-content\/plugins\/<\/code> or upload the ZIP via Plugins -> Add New -> Upload Plugin.<\/li>\n\n
Is this a copyright registration?<\/h3><\/dt>\n
Can this help in disputes?<\/h3><\/dt>\n
Does this prove ownership\/copyright?<\/h3><\/dt>\n
What data is timestamped?<\/h3><\/dt>\n
What happens with drafts and private posts?<\/h3><\/dt>\n
Which WordPress states are archived automatically?<\/h3><\/dt>\n
Where are snapshots and proof files stored?<\/h3><\/dt>\n
.ots<\/code> artifacts are stored locally under the uploads directory. Authorized users can download the snapshot, manifest, and finalized OTS from the WordPress dashboard. If you purchase a separate hosted plan, proofs may also be hosted by the Clockdo service (manifest + .ots<\/code> only; never the local full-text snapshot).<\/p>\n\n.htaccess<\/code>; nginx operators must explicitly deny \/wp-content\/uploads\/clockdo-ots-private\/<\/code> (or move that directory outside the web root).<\/p><\/dd>\nWill this affect SEO?<\/h3><\/dt>\n
rel=\"nofollow\"<\/code> by default.<\/p><\/dd>\n\n<\/dl>\n\n\n0.1.3<\/h4>\n\n
\n
0.1.1<\/h4>\n\n
\n
0.1.0<\/h4>\n\n
\n