Yatoon Social Feed

Yatoon Social Feed lets you show your Facebook Page photos and Instagram Business account photos side by side (or separately) anywhere on your WordPress site, using a simple shortcode.

Instead of routing your login through a third-party server, this plugin connects directly with your own Meta app: you enter its App ID and App Secret once, click Connect, and the plugin exchanges the result for a long-lived token on your own server. Nothing passes through Yatoon, and no Meta App Review is needed for your own Page and account. If you prefer, you can still paste a token you generated yourself.

Features

• Connect a Facebook Page with one click (“Connect with Facebook”): enter your own Meta app credentials once and the plugin obtains a long-lived Page token for you. Pasting a token manually is still possible
• Connect an Instagram Business or Creator account with one click (“Connect with Instagram”); the plugin renews the token automatically before it expires
• Instagram carousel posts (several photos or videos in one post) open as a slideshow in the lightbox
• Posts you delete on Facebook or Instagram disappear from your feed on the next sync
• Email and dashboard warnings when a connection needs attention (for example a token that cannot be renewed)
• Automatic background sync (hourly, twice daily, or daily) – or sync manually with one click
• Independent grid settings for Facebook and Instagram (columns, rows, spacing)
• Optional profile header showing avatar, name, follower count, bio, and a Follow button – auto-synced from the connected accounts, no manual typing required
• Simple shortcode: [yatoon_social_feed]
• Responsive layouts, mobile columns, gallery/card/social-wall presets, live device preview, and an accessible lightbox
• Local caching for synced Facebook and Instagram images, so temporary CDN URLs do not make the feed disappear
• TikTok account sync via the official Login Kit + Display API, with curated links as a fallback
• Privacy-first click-to-load official TikTok players; covers are cached locally during sync
• Fully translatable, with a bundled .pot file
• Lightweight: no Meta JavaScript SDKs loaded on your site

Pro Version

Pro adds caption keyword exclusion and a Custom CSS field, so you can curate the feed and match it to your site without a child theme. Upgrade to Pro.

Shortcode usage

[yatoon_social_feed]
[yatoon_social_feed platform="facebook"]
[yatoon_social_feed platform="instagram"]
[yatoon_social_feed platform="tiktok" columns="3"]
[yatoon_social_feed platform="facebook" columns="3" rows="2"]

External Services

This plugin connects to external APIs provided by Meta (Facebook/Instagram) to retrieve photos and profile information. These calls are made server-side from your WordPress installation – no Meta JavaScript SDK is loaded in visitors’ browsers.

Facebook Graph API and Facebook Login
Used to connect your account and to fetch your Facebook Page profile data (name, avatar, follower count, bio), photos, videos and posts. When you click “Connect with Facebook” your browser is sent to facebook.com to log in and approve access; your App ID, App Secret and the returned authorization code are then exchanged for tokens by your WordPress server. Data is also sent when you verify a token and during background sync.
– Service: Facebook / Meta Platforms, Inc.
– Endpoints: https://graph.facebook.com/ and https://www.facebook.com/ (login dialog)
– Terms of Service: https://developers.facebook.com/terms/
– Privacy Policy: https://www.facebook.com/privacy/policy/

Instagram API with Instagram Login
Used to connect your account and to fetch your Instagram profile data and media. When you click “Connect with Instagram” your browser is sent to instagram.com to log in and approve access; your Instagram app ID, app secret and the returned authorization code are then exchanged for tokens by your WordPress server. Tokens are renewed automatically. Data is also sent when you verify a token and during background sync.
– Service: Instagram / Meta Platforms, Inc.
– Endpoints: https://graph.instagram.com/, https://api.instagram.com/oauth/ and https://www.instagram.com/oauth/ (login dialog)
– Terms of Service: https://developers.facebook.com/terms/
– Privacy Policy: https://privacycenter.instagram.com/policy/

Facebook and Instagram media (video playback)
Facebook and Instagram video files are not copied to your server. When a visitor plays a video in the lightbox, their browser loads the file from Meta’s content delivery network (hosts such as *.fbcdn.net and *.cdninstagram.com), which makes the visitor’s IP address and browser details visible to Meta, as for any web resource.
– Service: Meta Platforms, Inc.
– Terms of Service: https://developers.facebook.com/terms/
– Privacy Policy: https://www.facebook.com/privacy/policy/

Freemius SDK (licensing and optional usage data)
The plugin includes the Freemius SDK to manage licensing and updates. With your consent in the opt-in screen, it sends basic site information (such as your site URL, WordPress and PHP versions, plugin version and your admin email address) to Freemius. If you skip the opt-in, only the data needed for licensing a paid plan is exchanged.
– Service: Freemius, Inc.
– Endpoints: https://api.freemius.com/ and https://wp.freemius.com/
– Terms of Service: https://freemius.com/terms/
– Privacy Policy: https://freemius.com/privacy/

TikTok Embed Player (optional)
Only when a visitor chooses to load a synced or curated TikTok video, their browser connects to TikTok to play it. Account syncing also sends the administrator’s saved app credentials and account token to TikTok’s OAuth and Display API endpoints from the WordPress server.
– Service: TikTok Pte. Ltd.
– Endpoints: https://open.tiktokapis.com/v2/oauth/ and https://open.tiktokapis.com/v2/video/; player: https://www.tiktok.com/player/
– Terms of Service: https://www.tiktok.com/legal/terms-of-service
– Privacy Policy: https://www.tiktok.com/legal/page/row/privacy-policy/en

This plugin does not collect or store visitor data. The only data transmitted to Meta’s APIs is your access token (to authenticate requests) and API query parameters (for example, requested fields and pagination limits).