GoValid QR connects your WordPress site to your GoValid account, letting you generate, embed, and track QR codes without leaving your WordPress admin.

Features

QR Code Generator — Create QR codes for URLs, text, email, phone, SMS, WiFi, and vCards right from your WordPress admin
Gutenberg Block — Add QR codes to any post or page with a visual picker
Shortcode — Embed QR codes anywhere using [govalid_qr id="uuid"]
Scan Analytics — Dashboard widget showing total scans, recent activity, and top QR codes
Secure Connection — OAuth 2.0 with PKCE (S256) for secure authentication
Image Caching — QR images cached locally for fast page loads
i18n Ready — Fully translatable

How It Works

Register an OAuth application in your GoValid dashboard
Enter your Client ID and Secret in the plugin settings
Click “Connect with GoValid” to authorize
Start creating and embedding QR codes!

Requirements

A GoValid account
WordPress 5.8 or later
PHP 7.4 or later

External Services

This plugin connects to the following external services:

GoValid API (my.govalid.org)

This plugin communicates with the GoValid platform to generate, manage, and verify QR codes.

What data is sent and when:

OAuth authentication — When connecting your account, the plugin exchanges an authorization code and refresh token with GoValid’s OAuth server (/oauth/token/). No personal WordPress user data is sent.
QR code generation — When creating a QR code, the plugin sends the QR type, name, security level, and any metadata you enter (e.g. product info, certificate data, timeline entries) to the GoValid API (/api/v1/qr/).
QR code verification — When a visitor loads the verification page (/v/{token}), the QR token is sent to the GoValid API (/api/v1/ojs/verify-signed/) to retrieve verification results. No visitor personal data is sent.
Analytics and dashboard — Scan statistics and analytics data are fetched from GoValid on admin pages. No visitor data is transmitted from WordPress; scan events are recorded by GoValid when a QR code is scanned directly.
Promotional ads — Admin sidebar may load promotional content from /api/v1/plugin/ads/. No personal data is sent.

Service provider: GoValid
Terms of Service: https://govalid.org/terms/
Privacy Policy: https://govalid.org/privacy/

Esri ArcGIS (server.arcgisonline.com)

The analytics map uses a satellite tile layer provided by Esri ArcGIS Online. Map tiles are loaded directly in the admin user’s browser when viewing the Analytics page. No data from your WordPress site is sent to Esri; tile requests include only the map coordinates being viewed.

Service provider: Esri
Terms of Use: https://www.esri.com/en-us/legal/terms/full-master-agreement
Privacy Policy: https://www.esri.com/en-us/privacy/privacy-statements/privacy-statement

Nominatim / OpenStreetMap (nominatim.openstreetmap.org)

When a QR code submission contains location data, the plugin may perform a reverse-geocoding lookup using the Nominatim API to convert GPS coordinates into a human-readable address. This request is made server-side. The latitude and longitude coordinates are sent to Nominatim; no other user data is transmitted.

Service provider: OpenStreetMap Foundation (Nominatim)
Terms of Use: https://operations.osmfoundation.org/policies/nominatim/
Privacy Policy: https://wiki.osmfoundation.org/wiki/Privacy_Policy

NexHub (nexhub.earth)

The plugin admin sidebar may display promotional content about NexHub. Preview images for this promotional content are bundled locally with the plugin and no requests are made to nexhub.earth at runtime.

Service provider: NexHub
Terms of Service: https://nexhub.earth/terms/
Privacy Policy: https://nexhub.earth/privacy/

Bundled Libraries

This plugin bundles the following third-party JavaScript library:

jsQR v1.4.0 — QR code decoding library used on the public scan page.
Source: https://github.com/cozmo/jsQR
License: Apache-2.0