What is sent outside your site
Link scan results, including URLs and their HTTP status, stay in your own database. The 404 log stores requested paths without query strings, hit counts, the last referrer and, unless disabled, the last user agent. No IP addresses are stored and no cookie is set. Referrer query strings are never stored, and values that look like credentials or personal data are masked. Active log rows expire after 30, 90 or 180 days, and ignored rows after one year, with row caps on both.
During a manual or enabled scheduled scan, link checks go directly from your server to the linked sites. Each destination sees your server's IP address, the configured user agent and the URL, including any personal data or signed token in that URL. Neither a cookie nor an authentication header is sent with those checks. The DevDome Dashboard also fetches the plugin catalog from devdome.com at most once every 12 hours, and only after the site is connected to a DevDome account, sending only the bundled core version and no site or visitor data. Only public http or https destinations on ports 80 or 443 without credentials in the URL are checked; private-network destinations are skipped, and the same limits apply after each redirect.
Connecting an optional DevDome account sends your site address, generated site ID and secret site token to DevDome; later account checks send the site domain and token. Connected scans send account identifiers, the scan number, aggregate scan metrics, the email-summary setting and the plugin screen address for the account dashboard and optional counts-only email. No scanned URLs, anchor text, post titles, 404 paths, referrers, user agents or visitor IP addresses are sent to DevDome. Connecting through the DevDome Tools dashboard card that discloses this also shares active DevDome plugin slugs and versions, plus the bundled library, WordPress and PHP versions. The Connect card in Link Monitor Settings enables the same sharing. Earlier connections and connections through buttons without that disclosure do not send the plugin list; disconnecting stops it.
Uninstalling and your data
Deactivating keeps all data. Deleting the plugin immediately removes its own tables, settings, transients and scheduled events on every site of a network. The shared DevDome library settings, including the account connection and cached detection lists, are also removed when Link Monitor is the last DevDome plugin installed; they remain while other DevDome plugins are installed.