

API key registration
This plugin is designed for the German-speaking market (Germany, Austria, Switzerland). It is intended for websites subject to German law. The admin interface is in German.
eRecht24 Legal Texts outputs legal texts (imprint, privacy policy) via shortcode or Gutenberg block. Legal texts are stored in the local WordPress database and displayed from there — no external request is needed for output.
The plugin works in two modes:
The shortcode is the core feature. This makes the output work in the Classic Editor, Gutenberg, Elementor, Divi, WPBakery, and other page builders that support WordPress shortcodes.
External requests are only triggered when an authorized administrator saves or removes the API key, starts a synchronization or remote push test, explicitly enables Google Analytics, uninstalls the plugin with a stored eRecht24 client registration, or an authorized eRecht24 push with a valid secret is received.
When an eRecht24 account is connected, the plugin uses the eRecht24 API to retrieve legal texts. The legal texts (imprint, privacy policy) are authored, reviewed, and maintained by eRecht24’s legal team on their servers. This content cannot be generated locally by the plugin. Retrieved texts are stored in the local WordPress database; the API is only contacted during synchronisation, not during output.
Optionally, the plugin can output a Google Analytics tracking snippet if an administrator explicitly enables this feature. Visitor data is collected and processed by Google on their servers; this cannot be done locally by the plugin.
Shortcode examples:
Imprint in German
[erecht24 type=”imprint” lang=”de”]
Privacy policy in German
[erecht24 type=”privacy_policy” lang=”de”]
Imprint in English, heading stripped (e.g. because it already exists on the page)
[erecht24 type=”imprint” lang=”en” strip_title=”true”]
When saving or removing the API key, during manual synchronisation, during an explicitly triggered remote push test, during authorised push updates, and when uninstalling with a stored eRecht24 client registration, this site’s server communicates with the eRecht24 API. Technical connection data, the API key in the request header, and the registered push URL may be transmitted.
Authorised push updates are processed via the WordPress REST endpoint erecht24/v1/push using POST. The push secret is expected as the header X-eRecht24-Secret or in the POST/JSON body and is never read from URL query parameters.
When Google Analytics is enabled, the plugin loads the Google Tag from www.googletagmanager.com. This feature is disabled by default and must be consciously switched on by an administrator.
The plugin adds a suggested privacy policy text via the WordPress privacy policy feature.