Delete Account for Easy Digital Downloads

Lets customers delete their own Easy Digital Downloads account (GDPR's right to erasure), with a Delete Account block you place on e.g. your Account page, below the profile editor.

The block lists what deleting the account does, and asks to confirm with a checkbox. Its heading, introduction, list, checkbox label and button text are edited in the block editor, and it supports borders, colors and spacing. {site_name} is replaced with your site's name. The block is only shown to logged-in customers; administrators see a preview.

What happens when a customer deletes their account

1. Their active subscriptions (EDD Recurring) are cancelled at the payment gateway, so they're not charged again. If that fails, the account isn't deleted, and you're notified.
2. Their license keys (EDD Software Licensing) are detached from the account: they keep working until they expire, and can still be renewed with the license key at checkout.
3. WordPress' personal data erasers run (the same as Tools > Erase Personal Data): EDD anonymizes the customer and their download logs, reviews, comments and AffiliateWP customer records, and anonymizes or deletes their orders depending on each order's status (see below). If Brevo for EDD is set up, the contact is deleted from Brevo.
4. The WordPress user is deleted and logged out, and sees a confirmation.
5. You get an email with what was done, and which erasers failed, if any. If the email can't be sent, the report goes to PHP's error log.

Staff, affiliates (AffiliateWP) and customers with orders EDD may not change (e.g. still processing) can't delete their account here: they're asked to contact you.

Orders

What happens to a customer's orders depends on their status, as set in Downloads > Settings > Policies > Privacy > Order Statuses. By default:

You can change this per status (Anonymize, Delete or Do Nothing) in Downloads > Settings > Policies > Privacy > Order Statuses.

Installation

1. Download the zip from the latest release, upload it in Plugins > Add New and activate it.
2. Add the Delete Account block to your Account page, e.g. below the profile editor, and enter the URL of your contact page in its settings.
3. Check Downloads > Settings > Policies > Privacy > Order Statuses: EDD only anonymizes a customer if all of their orders may be anonymized or deleted, so set e.g. Renewal to Anonymize.

Hooks

What the form submitted is passed unslashed, but not sanitized: sanitize it yourself.

Example: ask why they're leaving

// Add a field to the form.
add_action( 'edd_delete_account_form_fields', function () {
    ?>
    <p>
        <label for="leaving-reason">Why are you leaving? (optional)</label>
        <textarea id="leaving-reason" name="leaving_reason" rows="3"></textarea>
    </p>
    <?php
} );

// Add the answer to the email you get when someone deletes their account.
add_filter( 'edd_delete_account_notification_lines', function ( $lines, $user, $data ) {
    $reason = sanitize_textarea_field( $data['leaving_reason'] ?? '' );

    if ( $reason ) {
        $lines[] = '';
        $lines[] = 'Why they left: ' . $reason;
    }

    return $lines;
}, 10, 3 );

To save it somewhere else instead, e.g. in a database table, use the edd_delete_account_before action: function ( $user, $customer, $data ). Don't store it with the user or customer: those are deleted or anonymized right after.

Development

No build step: the block's editor script is plain JavaScript. After adding a class, run composer dump-autoload.