=== Conversion.Business Gamified CAPTCHA ===
Contributors: Kate
Tags: captcha, woocommerce checkout captcha, security, antispam, bot protection
Requires at least: 5.8
Tested up to: 7.0
Requires PHP: 7.4
Stable tag: 2.1.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Frictionless, gamified, zero-telemetry CAPTCHA for WordPress and WooCommerce. Stop bots without annoying your customers.

== Description ==

Conversion.Business Gamified CAPTCHA is the definitive solution for WooCommerce checkout captcha and WordPress spam protection. We replace frustrating, high-friction image puzzles with delightful 2-5 second HTML5 micro-games. 

Our zero-friction, privacy-first architecture stops bots, prevents WooCommerce card testing attacks, and keeps your human users happy. It is 100% ADA compliant and WCAG 2.1 accessible, ensuring no legitimate customer is ever blocked from checking out.

**Important SaaS Disclosure:** This plugin requires communication with external Conversion.Business servers to process CAPTCHAs and serve game assets securely. By using this plugin, you agree to our [Terms of Service](https://conversion.business/terms) and [Privacy Policy](https://conversion.business/privacy). 

Conversion.Business CAPTCHA is a modern alternative to traditional picture-puzzle CAPTCHAs. Traditional CAPTCHAs (like identifying traffic lights) frustrate users and destroy your conversion rates. 

Our plugin protects your WordPress login, registration, comments, and WooCommerce checkouts using fast, frictionless HTML5 micro-games and zero-telemetry behavioral validation.

### Features
* **Zero-Friction:** Replace annoying image puzzles with quick, fun interactions.
* **WooCommerce Support:** Native support for both Classic Checkout and modern WooCommerce Checkout Blocks.
* **Privacy First:** We don't use tracking cookies or harvest user data. Fully GDPR compliant.
* **VIP Bypass:** Automatically disable the CAPTCHA for your logged-in, authenticated customers to speed up their checkout process.

== Installation ==

1. Upload the `conversion-business-captcha` directory to the `/wp-content/plugins/` directory, or install directly through the WordPress plugins screen.
2. Activate the plugin through the 'Plugins' screen in WordPress.
3. Go to **Settings > Conversion Captcha**.
4. Click the **"✨ Enable Protection"** button. (Your API keys will be automatically provisioned and securely saved using your admin email).
5. Select which forms you want to protect and click Save.

== Frequently Asked Questions ==

= Why isn't the widget showing up on my checkout page? =
If you are using a caching or minification plugin (like WP Rocket, Autoptimize, or W3 Total Cache), it may be blocking or deferring our `widget.js` script. Please add   `conversion-business-widgets.web.app/widget.js` to your caching plugin's exclusion list.

= Does this work with WooCommerce Blocks? =
Yes! We natively integrate with the WooCommerce Store API and Gutenberg Checkout Blocks.

== Changelog ==

= 2.1.0 =
* Feature: Massive expansion to Third-Party Forms. Added native, zero-friction integration for Contact Form 7, WPForms, and Elementor Pro Forms.
* Feature: Added Universal Dynamic UI providing a clear, real-time visual confirmation banner ("Verification Confirmed") when a game is successfully completed.
* Security: Implemented strict placement toggle guards, giving you absolute control to turn specific form protections on or off.
* Security: Hardened token validation in the WooCommerce REST API schema routing.

= 2.0.0 =
* Major Architecture Update: Moved to a 100% decentralized HMAC verification architecture.
* Performance: Zero network requests are made to the Conversion.Business backend during form submission, making the CAPTCHA validation instant.
* Security: Implemented local 5-minute expiration gates and transient-based Replay Attack caching to eliminate authentication bypass vulnerabilities.
* Cleanup: Removed obsolete setup nag notices and background usage-polling cron jobs.

= 1.0.4 =
* Added Live Preview Playground Teaser.

= 1.0.3 =
* Replaced the contact form with a direct link to the WordPress.org support forum.

= 1.0.2 =
* Update installation instructions for one-click setup.

= 1.0.1 =
* Fix UI bug.

= 1.0.0 =
* Initial Release. Support for WP Login, Register, Comments, and WooCommerce.

== External services ==

This plugin relies on the Conversion.Business API to securely generate and validate gamified CAPTCHAs, protecting your site from bots without tracking user behavior.

- **What data is sent and when:** 
  - Upon plugin setup, the site URL and admin email are sent to generate your secure API keys.
  - When a user submits a protected form, a hashed token containing the puzzle difficulty (Proof-of-Work) and solve time is sent to our validation servers. **No personally identifiable information (PII), tracking cookies, or background mouse movements are sent or stored.** (Privacy First Architecture).
- **Service Providers & Domains:** 
  - **`conversion.business`**: Used to fetch the game list ecosystem configuration.
  - **`conversion-business-widgets.web.app`**: Used for secure API interactions such as provisioning keys, validating connections, and synchronizing usage limits.
- **Terms of Service:** https://conversion.business/terms (Applies to all endpoints)
- **Privacy Policy:** https://conversion.business/privacy (Applies to all endpoints)
