Vinceweb Shopping Lists

Description

Vinceweb Shopping Lists provides simple shared-device shopping lists without requiring every person to have a WordPress account.

Create separate lists for different people, protect each list with an optional PIN, and let shoppers plan and complete a trip from a phone, tablet, or desktop.

Features include:

• Multiple separate shopping-list profiles.
• Optional PIN access without a WordPress login.
• Persistent products that remain available for future trips.
• Saved price and quantity for estimating the next shop.
• Editable store-location buttons such as Fruit & Veg, Grocery, Bakery, Chilled, and Frozen.
• Custom ordering of store locations to match the route through a shop.
• Shopping mode with an “In basket” action.
• Per-shop basket, remaining, and estimated totals.
• Product and price editing while shopping.
• Catalogue-first product picker while shopping, with duplicate protection.
• Shop-specific normal and sale prices with persistent sale information.
• Shopping history, 12-month insights, and CSV export.
• Print only the items currently selected.
• Administrator-only profile and store-location management.
• Products are not deleted when an item is placed in the basket.
• No external services, tracking, advertising, or remote APIs.

Use the shortcode:

[vinceweb_shopping_list]

For existing installations, the previous [my_shopping_list] and [mothers_shopping_list] shortcodes remain supported as compatibility aliases.

Privacy

The plugin stores shopping-list profile names, hashed PINs, product names, quantities, prices, store locations, selection state, and shopping state in the local WordPress database.

When a profile is opened, the plugin sets HTTP-only cookies that remember the profile for up to 180 days. The cookies contain a profile identifier and a site-specific authentication token. PINs are stored as WordPress password hashes and are not stored in plain text.

To reduce repeated PIN guessing, failed PIN attempts are temporarily rate-limited using a short-lived transient keyed from a one-way hash of the connecting IP address.

No shopping-list information is transmitted to external services by this plugin.

Technical details