Daytime Notes

Daytime Notes lets you, your team and your clients leave notes on specific parts of a WordPress page. Click a heading, an image or a button, type what needs to change, and the note stays attached to that spot. No more emails about “the blue button near the top”.

Client feedback usually arrives as an email, a phone call or a screenshot with a circle drawn on it. It’s hard to tell what it refers to, and harder to keep track of. Daytime Notes keeps the feedback on the page itself:

• Feedback in context: every note points at the exact element it’s about, so there’s nothing to interpret.
• Clients stay out of wp-admin: the Reviewer role lets a client leave notes without seeing the dashboard or being able to change anything.
• No inbox flood: twenty notes on a page means one summary email, not twenty.
• Works with your builder: it’s not tied to a page builder, so it works the same way on any site you build.
• Private by design: notes stay in your WordPress database. No third-party service, no tracking.
• Free is complete: it isn’t a trial or a demo. It does the job on its own and stays maintained, whether or not you ever upgrade.

1. From WordPress.org:
   1. In your dashboard, go to Plugins → Add New.
   2. Search for Daytime Notes (https://wordpress.org/plugins/daytime-notes/), then click Install Now and Activate.
   3. Create a user with the Daytime Notes Reviewer role for your client, or use an existing Editor or Administrator account.
   4. Visit any page, click Daytime Notes in the admin bar, and start adding notes.

Go to Settings → Daytime Notes. Everything is optional: the plugin works without changing a thing.

Content

• Note character limit: the maximum length of a note (150 by default, 0 for unlimited).
• Unassigned note completion: let anyone with access mark an unassigned note complete, instead of only the person who wrote it. Off by default.

Data Management

• Remove data on uninstall: off by default, so uninstalling keeps your notes. Turn it on to delete everything when the plugin is removed.

Your profile

• Enable Daytime Notes: each person can switch the notes panel and their notification emails on or off from their own profile. Notifications for someone who has switched it off are held and sent as one summary when they switch it back on.

Daytime Notes keeps everything inside your own WordPress site.

• What’s stored: note content, the element each note is attached to, the page, who wrote it and who it’s assigned to, timestamps, completion status, and your settings. All of it lives in your WordPress database.
• No tracking, analytics or tracking cookies.
• No external requests. The plugin doesn’t contact any outside server or service.
• Emails go through your site: notifications are sent with WordPress’s own mail function, so they follow your SMTP or mail settings.
• Browser storage: your browser remembers small interface preferences, such as whether the panel is open, and keeps unsaved note drafts. Nothing in it is sent anywhere.

Notes can be deleted from the notes panel at any time. Full removal of all plugin data on uninstall is available under Settings → Daytime Notes → Data Management.

Daytime Notes lets clients and team members into your site, so it’s built to make sure people can only see and do what they’re meant to.

How it’s checked

• Reviewed by WordPress.org: the WordPress.org Plugin Review Team checked the plugin by hand before approving it for the plugin directory.
• Checked against WordPress standards: every release is run through WordPress’s Plugin Check tool.
• Security review on every release: before each release, the code gets a dedicated security review. It looks for problems that automated tools miss, such as someone seeing or changing notes that aren’t theirs.
• Problems are fixed before release: anything a check turns up is fixed before that version is published.

How it’s built

• Every request is verified: each action (saving, editing, deleting or completing a note) checks that the request really came from your site and that the person is allowed to do it.
• Permissions are enforced on the server: people can only edit or delete notes they wrote. This is checked by WordPress itself, not just hidden in the browser.
• Clients get the minimum: the Reviewer role can leave notes, but can’t edit content, change settings or open the WordPress admin.
• Safe database queries: every query is prepared, so what people type can’t be used to tamper with your database.
• Input is cleaned, output is escaped: note text is cleaned when it’s saved and escaped when it’s shown, so a note can’t be used to run code in someone else’s browser.
• Nothing leaves your site: no external services means no third party to trust with your notes.

If you are using this plugin and think you’ve found a security issue, please report it privately through the Connect page rather than in a public support forum, so it can be fixed before it’s made public.

0.9.1 (31 August 2026)

• @mentions and “Assigned to” labels now show people’s display names instead of their usernames.
• Notification emails no longer repeat the plugin name in their footer.
• The panel’s resize handle no longer hides behind the scrollbar, and the panel title no longer overlaps its buttons.
• The Settings page shows the correct plugin version.

0.9.0 (22 July 2026)

• First public release on WordPress.org.
• Notes show friendly times (“2 hours”, “3 days”). Click one to see the exact date and time.
• Reviewer accounts are taken straight to the front end instead of the WordPress admin.