DriveHub — Google Drive Manager

DriveHub provides deep Google Drive integration for WordPress. Connect your Google Drive account and manage files without leaving WordPress — display files in galleries and lists, upload directly to Drive, embed documents and media, control access by user role, and assign private folders per user.

Key Features:

• Browse and display Google Drive files on the frontend
• Upload files directly to Google Drive from WordPress
• Embed documents, images, and media players
• Module builder for galleries, file lists, sliders, and more
• Per-user private folder assignments
• Analytics and download tracking
• Password-protected modules
• Access control by user role

Bundled Libraries

This plugin ships the following third-party PHP libraries inside the plugin folder. These are not loaded from a CDN — they are bundled for offline use.

Google APIs PHP Client Library

• Location: vendor/Google-sdk/
• Version: 1.1.5 (prefixed fork — class names prefixed to prevent conflicts with other plugins loading the same library)
• Latest upstream version: 2.x — https://github.com/google/google-api-php-client/releases
• Note: This plugin uses a prefixed fork based on v1.1.5. The upstream v2.x uses PSR-4 namespaces which require a different autoloading approach.
• License: Apache License 2.0 (compatible with GPL-2.0-or-later)
• License URI: https://www.apache.org/licenses/LICENSE-2.0
• Source: https://github.com/google/google-api-php-client

JavaScript / Frontend Libraries (compiled into bundle)

The following open-source npm packages are compiled into assets/admin/admin.js and assets/js/frontend.js via Vite. They are not loaded separately — they are bundled at build time.

• React v18.3.1 — https://github.com/facebook/react — MIT License
• React DOM v18.3.1 — https://github.com/facebook/react — MIT License
• React Router DOM v6.27.0 — https://github.com/remix-run/react-router — MIT License
• Zustand v5.0.0 — https://github.com/pmndrs/zustand — MIT License
• Radix UI (Dialog, Dropdown, Tooltip, Slot) v1.x — https://github.com/radix-ui/primitives — MIT License
• Heroicons React v2.2.0 — https://github.com/tailwindlabs/heroicons — MIT License
• Lucide React v0.453.0 — https://github.com/lucide-icons/lucide — ISC License
• Tailwind CSS v3.4.14 — https://github.com/tailwindlabs/tailwindcss — MIT License
• clsx v2.1.1 — https://github.com/lukeed/clsx — MIT License
• tailwind-merge v2.5.4 — https://github.com/dcastil/tailwind-merge — MIT License
• react-hot-toast v2.6.0 — https://github.com/timolins/react-hot-toast — MIT License

All bundled JavaScript libraries are MIT or ISC licensed, which are compatible with GPL-2.0-or-later.

External Services

This plugin connects to the following third-party external services. No data is sent to any service without a direct user-initiated action (such as clicking ”Connect Google Account”).

Google Drive API

• Domain: googleapis.com
• Purpose: Read, upload, list, delete, and manage files in the connected Google Drive account.
• Data sent: OAuth access token (for authentication), file metadata, file content during upload/download.
• When it connects: Only when an admin or user actively browses, uploads, or manages files.
• Terms of Service: https://policies.google.com/terms
• Privacy Policy: https://policies.google.com/privacy

Google OAuth 2.0

• Domains: accounts.google.com, oauth2.googleapis.com
• Purpose: Authenticate Google accounts and obtain access tokens for Google Drive.
• Data sent: Authorization code (exchanged for access token), Google account email and profile info.
• When it connects: Only when an admin clicks ”Connect Google Account”.
• Terms: https://developers.google.com/terms
• API Services User Data Policy: https://developers.google.com/terms/api-services-user-data-policy
• Privacy Policy: https://policies.google.com/privacy

Sovlix OAuth Proxy

• Domain: sovlix.com
• Endpoint: https://sovlix.com/drivehub-connect/
• Purpose: Provides a shared OAuth client ID/secret so site owners can connect Google Drive without creating their own Google Cloud project. This is an optional convenience feature — you can use your own Google OAuth credentials instead (see Settings).
• Data sent: Your WordPress site URL and the OAuth authorization code received from Google. The proxy exchanges the code for an access token, returns it to your WordPress site, and does not retain any copies after the connection is complete.
• When it connects: Only when an admin clicks ”Connect Google Account” AND no custom Google OAuth credentials are configured in plugin settings.
• What the proxy does NOT store: File contents, file metadata, passwords, or any data from other Google services (Gmail, Calendar, etc.).
• What stays on your server: OAuth access tokens (1-hour expiry) and encrypted refresh tokens are stored only in your WordPress database. Sovlix does not retain copies.
• Revoke access: Disconnect via DriveHub > Accounts, or remove access directly from your Google account permissions page.
• Privacy Policy: https://sovlix.com/drivehub-privacy/
• Terms of Service: https://sovlix.com/drivehub-terms/
• Google Terms of Service (governs OAuth flow): https://policies.google.com/terms
• Google Privacy Policy: https://policies.google.com/privacy

To avoid using the Sovlix proxy entirely: Go to DriveHub > Settings > OAuth Credentials, enter your own Google OAuth Client ID and Client Secret. Once set, all authentication goes directly from your WordPress site to Google — the proxy is never contacted.

Data Policy

• No telemetry: This plugin does not collect usage statistics, analytics, or crash reports.
• No tracking pixels: No hidden requests are made to any server on page load.
• No data sold or shared: Google user data is never sold, rented, or transferred to any third party.
• Encrypted token storage: Refresh tokens are encrypted using industry-standard encryption before being stored in your WordPress database (wp_options). Access tokens expire after 1 hour.
• No external file storage: Google Drive files remain in your Google account. The plugin reads and streams file data through your server only when necessary (e.g., download tracking). It does not store file contents.
• Minimal data scope: Only Google Drive is accessed. Other Google services (Gmail, Calendar, etc.) are never requested or accessible.
• Admin-only connection: Only users with the manage_options capability can connect or disconnect Google accounts.
• User data in Drive: If you assign private folders to WordPress users, their WordPress user IDs are used to generate folder names in Google Drive. No other personally identifiable information is sent to any external service.
• Revoke at any time: Disconnect via DriveHub > Accounts or remove access from your Google account permissions page (myaccount.google.com/permissions).
• GDPR note: Site administrators are responsible for informing users about any Google Drive integration on their site. This plugin does not present its own consent UI to frontend visitors.

Source Code

This plugin ships compiled/minified JavaScript and CSS files. The uncompiled source code is available upon request for review purposes. Contact the plugin author via the WordPress.org support forum.

Compiled Files

Admin application

• Compiled: assets/admin/admin.js
• Source: admin/src/ (React 18, JSX, Tailwind CSS)
• Build command: npm run build

Frontend application

• Compiled: assets/js/frontend.js
• Compiled CSS: assets/css/frontend.css
• Source: frontend/src/ (React 18, JSX, Tailwind CSS)
• Build command: npm run build:frontend

Additional compiled assets

• assets/js/media-library.js — WordPress media library integration
• assets/js/tinymce-plugin.js — TinyMCE editor button

Tech Stack

• React 18 + JSX
• Tailwind CSS 3
• Zustand (state management)
• Vite 5 (bundler)
• @wordpress/api-fetch (REST API calls)

Privacy Policy

This plugin connects to external services only when a site administrator actively initiates an action. No data is collected passively or on page load.

Google Drive API and Google OAuth 2.0

When you connect a Google account, this plugin communicates with googleapis.com, accounts.google.com, and oauth2.googleapis.com. Data sent includes the OAuth authorization code, access tokens, and Google Drive file metadata (names, IDs, MIME types, thumbnails). File contents are never stored on your server except when streamed on demand.

• Google Privacy Policy: https://policies.google.com/privacy
• Google Terms of Service: https://policies.google.com/terms
• Google API Services User Data Policy: https://developers.google.com/terms/api-services-user-data-policy

Sovlix OAuth Proxy (optional)

If you do not provide your own Google OAuth credentials, this plugin uses an OAuth proxy at https://sovlix.com/drivehub-connect/ to facilitate the Google OAuth flow. The proxy receives your WordPress site URL and the Google authorization code, exchanges the code for tokens, and returns them to your site. Sovlix does not retain any copies of tokens, file data, or site data after the connection is complete. Refresh tokens are encrypted and stored only in your WordPress database.

• Sovlix Privacy Policy: https://sovlix.com/drivehub-privacy/
• Sovlix Terms of Service: https://sovlix.com/drivehub-terms/

To bypass the proxy entirely, enter your own Google OAuth Client ID and Secret in DriveHub > Settings > OAuth Credentials.

No telemetry or tracking. This plugin does not send usage data, analytics, or crash reports to any server. Google user data is never sold, rented, or shared with third parties.