
Yatoon Social Feed lets you show your Facebook Page photos and Instagram Business account photos side by side (or separately) anywhere on your WordPress site, using a simple shortcode.
Instead of routing your login through a third-party server, this plugin connects directly with your own Meta app: you enter its App ID and App Secret once, click Connect, and the plugin exchanges the result for a long-lived token on your own server. Nothing passes through Yatoon, and no Meta App Review is needed for your own Page and account. If you prefer, you can still paste a token you generated yourself.
Features
[yatoon_social_feed]Pro adds caption keyword exclusion and a Custom CSS field, so you can curate the feed and match it to your site without a child theme. Upgrade to Pro.
Shortcode usage
[yatoon_social_feed]
[yatoon_social_feed platform="facebook"]
[yatoon_social_feed platform="instagram"]
[yatoon_social_feed platform="tiktok" columns="3"]
[yatoon_social_feed platform="facebook" columns="3" rows="2"]
This plugin connects to external APIs provided by Meta (Facebook/Instagram) to retrieve photos and profile information. These calls are made server-side from your WordPress installation – no Meta JavaScript SDK is loaded in visitors’ browsers.
Facebook Graph API and Facebook Login
Used to connect your account and to fetch your Facebook Page profile data (name, avatar, follower count, bio), photos, videos and posts. When you click “Connect with Facebook” your browser is sent to facebook.com to log in and approve access; your App ID, App Secret and the returned authorization code are then exchanged for tokens by your WordPress server. Data is also sent when you verify a token and during background sync.
– Service: Facebook / Meta Platforms, Inc.
– Endpoints: https://graph.facebook.com/ and https://www.facebook.com/ (login dialog)
– Terms of Service: https://developers.facebook.com/terms/
– Privacy Policy: https://www.facebook.com/privacy/policy/
Instagram API with Instagram Login
Used to connect your account and to fetch your Instagram profile data and media. When you click “Connect with Instagram” your browser is sent to instagram.com to log in and approve access; your Instagram app ID, app secret and the returned authorization code are then exchanged for tokens by your WordPress server. Tokens are renewed automatically. Data is also sent when you verify a token and during background sync.
– Service: Instagram / Meta Platforms, Inc.
– Endpoints: https://graph.instagram.com/, https://api.instagram.com/oauth/ and https://www.instagram.com/oauth/ (login dialog)
– Terms of Service: https://developers.facebook.com/terms/
– Privacy Policy: https://privacycenter.instagram.com/policy/
Facebook and Instagram media (video playback)
Facebook and Instagram video files are not copied to your server. When a visitor plays a video in the lightbox, their browser loads the file from Meta’s content delivery network (hosts such as *.fbcdn.net and *.cdninstagram.com), which makes the visitor’s IP address and browser details visible to Meta, as for any web resource.
– Service: Meta Platforms, Inc.
– Terms of Service: https://developers.facebook.com/terms/
– Privacy Policy: https://www.facebook.com/privacy/policy/
Freemius SDK (licensing and optional usage data)
The plugin includes the Freemius SDK to manage licensing and updates. With your consent in the opt-in screen, it sends basic site information (such as your site URL, WordPress and PHP versions, plugin version and your admin email address) to Freemius. If you skip the opt-in, only the data needed for licensing a paid plan is exchanged.
– Service: Freemius, Inc.
– Endpoints: https://api.freemius.com/ and https://wp.freemius.com/
– Terms of Service: https://freemius.com/terms/
– Privacy Policy: https://freemius.com/privacy/
TikTok Embed Player (optional)
Only when a visitor chooses to load a synced or curated TikTok video, their browser connects to TikTok to play it. Account syncing also sends the administrator’s saved app credentials and account token to TikTok’s OAuth and Display API endpoints from the WordPress server.
– Service: TikTok Pte. Ltd.
– Endpoints: https://open.tiktokapis.com/v2/oauth/ and https://open.tiktokapis.com/v2/video/; player: https://www.tiktok.com/player/
– Terms of Service: https://www.tiktok.com/legal/terms-of-service
– Privacy Policy: https://www.tiktok.com/legal/page/row/privacy-policy/en
This plugin does not collect or store visitor data. The only data transmitted to Meta’s APIs is your access token (to authenticate requests) and API query parameters (for example, requested fields and pagination limits).