Spotmap

Spotmap turns your WordPress site into a self-hosted GPS tracking platform. Connect your devices, and Spotmap stores every position in your own database — no third-party cloud required.

Supported devices (data feeds)

• SPOT (FindMeSPOT) — automatic feed polling via XML API
• Garmin inReach — receives positions via Garmin’s MapShare feed
• OsmAnd — receives positions via HTTP from the OsmAnd smartphone app
• Teltonika — direct integration for Teltonika GPS routers and trackers
• WordPress Media Library — photos with GPS EXIF data can appear on the map
• Post Locations — assign GPS coordinates to any WordPresspost or page via the block editor sidebar. Posts appear on the map as clickable markers that link directly to the article so readers can jump from the map to the full story.
• Zoleo — if you have a Zoleo device please reach out to the plugin author

Map & visualization

• Interactive Leaflet map with full Gutenberg block support — type /spotmap in the editor
• Wide range of tile providers: OpenStreetMap, Mapbox, Thunderforest, LINZ (NZ), IGN France, UK Ordnance Survey, USGS, OpenSeaMap, ESRI Ocean, and any custom XYZ tile URL
• GPX track overlay via the built-in GPX manager — upload and manage GPX files for planned routes, waypoints, and recorded tracks
• Photo EXIF GPS display — images from your media library with location data appear on the map
• Configurable line breaks when no positions arrive within a set time interval
• Multiple feeds and devices on a single map, each with its own color
• Post location markers — each marker shows the post title and links to the article, turning any map block into a navigable index of location-tagged content
• Configurable marker styles and icons

Filtering & interaction

• Rich time filtering including relative ranges like ”last 24 hours” or ”last 7 days”, and absolute date ranges
• Interactive data table linked to the map — click a check-in to zoom to that position
• Initial map state options: show all points, zoom to last position, or zoom to last trip
• Auto-refresh without full page reload

Data management

• Long-term position storage — your data stays in your WordPress database for as long as you want
• Convert tracked positions to GPX export
• Manage, move, and delete points from the WordPress dashboard
• Upload and organize GPX files through the GPX manager

Performance

• Rewritten map engine in TypeScript for better reliability
• Significantly faster rendering with large numbers of points compared to 0.11.x

Why Spotmap?

Most GPS tracking solutions lock your data into a vendor cloud. SPOT’s own platform doesn’t even offer free long-term storage. Spotmap keeps everything on your server — whether you’re documenting a sailing trip, sharing a bike tour with friends and family, or tracking vehicles. Your data, your rules.

Security

Message content and phone numbers

SPOT devices can include a phone number or personal message in their transmission data. This information is stored in the database and may appear in marker popups on your map. To overwrite this content, use the Marker section in Settings > Spotmap. Setting a feed password in your SPOT account (and entering it in the plugin settings) ensures that the message content is not stored in the WordPress database and thus not accessible by the public.

Live location privacy

The plugin offers a cosmetic filter to hide points newer than a configurable threshold (e.g. 30 minutes, 2 hours, or 1 day). This prevents the most recent positions from appearing on the public map.

Important: this filter is display-only. The REST API endpoint exposed by the plugin can return all points stored in the database, regardless of the block filter setting. There is currently no way to fully hide the latest positions from a technically capable visitor. If hiding live locations from the API is a requirement, you should restrict access to the REST API endpoint at the server or WordPress level.

Map tokens

API tokens for tile layer providers (Mapbox, Thunderforest, LINZ, IGN France, OS UK, etc.) are stored in WordPress settings and embedded in the page HTML at render time. Any visitor who views the page source can read your token.

To reduce the risk of token abuse, restrict each token to your domain using the provider’s referrer/HTTP origin restrictions (e.g. https://yoursite.com/*).

Shortcodes

If you use a legacy text editor and require shortcodes, you are able to use the shortcode builder from the settings page of Spotmap. there you can interactively create the shortcode you need.

The following shortcodes are supported:

[spotmap] — embeds an interactive map [spotmessages] — embeds a table of SPOT messages and check-ins

For the full attribute reference, see README-SHORTCODE.md on GitHub.