=== CookiePeak - Consent Banner ===
Contributors: flobamedia
Tags: cookie, gdpr, consent, banner, cmp
Requires at least: 6.0
Tested up to: 7.0
Requires PHP: 8.0
Stable tag: 0.4.8
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Official CookiePeak (cookiepeak.com) WordPress plugin by FloBa Media. GDPR-ready consent banner in minutes.

== Description ==

CookiePeak - Consent Banner is the official WordPress client for the CookiePeak
consent management product at https://cookiepeak.com, operated by FloBa Media
(https://www.floba-media.de). CookiePeak is our own product name and domain.

Connect your site to CookiePeak and ship a customized cookie consent banner with
one click (OAuth or Website ID).

= Features =

* Early script loading in the document head (before most tracking plugins)
* OAuth connect with your CookiePeak account
* Shortcode [cookiepeak_settings] for privacy policy / footer links
* Optional custom CDN URL for banner.js
* Google Consent Mode v2 support
* GDPR / CCPA oriented workflows

= External services =

This plugin relies on external services. Details below are also listed so site
owners know what is contacted and why.

= CookiePeak (required for banner functionality) =

Service: CookiePeak consent management (https://cookiepeak.com), operated by
FloBa Media.

What it is used for:
* Loading the consent banner script (banner.js) and banner configuration
* Optional OAuth connection from wp-admin to manage websites
* Receiving consent log events and aggregated page-view counts used by CookiePeak

What data is sent and when:
* Frontend (when a Website ID is configured and the banner is enabled): the site
  loads banner.js and fetches banner configuration for that Website ID
* When a visitor saves consent choices: consent categories/choices and a hashed
  session identifier are sent to the CookiePeak API (raw IP addresses are not stored)
* Aggregated page-view counts for usage metering
* OAuth in wp-admin: authorization code / token exchange and API calls to
  list or create websites; access and refresh tokens are stored in the WordPress
  database (not publicly)

Legal / privacy links (operator):
* Service: https://cookiepeak.com
* Privacy policy: https://www.floba-media.de/datenschutz
* Legal notice (Impressum / operator terms): https://www.floba-media.de/impressum

Without a Website ID (and with the banner disabled) the plugin does not call
CookiePeak on the public frontend.

= Third-party scripts already on your WordPress site =

This plugin does not embed or call Google Tag Manager, Google Analytics, Meta
Pixel, or similar services by itself. If your theme or other plugins already
output those scripts, CookiePeak may rewrite their script tags so they only run
after the matching consent category is granted. Any data those third-party
scripts transmit is controlled by those providers and by your own site setup,
not by CookiePeak initiating those connections.

= Setup =

1. Install and activate the plugin
2. Go to Settings → CookiePeak and connect via OAuth, or enter your Website ID
3. Done – the banner is injected on frontend pages automatically

== Installation ==

1. Upload the plugin ZIP under Plugins → Add New → Upload Plugin
2. Activate the plugin
3. Open Plugins → CookiePeak → Settings (or Settings → CookiePeak)

== Frequently Asked Questions ==

= Where do I find my Website ID? =

In the CookiePeak dashboard under Websites → [Your domain] → Embed script.

= Does it work with caching plugins? =

Yes. The script is enqueued in the head and works with common caching plugins.
After updates you can purge page caches from Settings → CookiePeak.

= Can I use my own CookiePeak instance? =

Yes. Under Settings → CookiePeak → Advanced you can set a custom app URL.

= How do I link cookie settings? =

Use the shortcode [cookiepeak_settings] on your privacy page or in the footer.

= What data is sent to CookiePeak? =

See the "External services" section above. Consent events and page views go to
the CookiePeak API; IP addresses are not stored (see the operator privacy policy).

= Which languages does the plugin support? =

The plugin is internationalized (text domain: cookiepeak). On WordPress.org,
translations are delivered via translate.wordpress.org. The consent banner
language is configured in the CookiePeak dashboard.

== Changelog ==

= 0.4.8 =
* Plugin Review: prefixed shortcode cookiepeak_settings
* Explicitly close output buffer on shutdown
* Expand External services documentation in readme
* Do not ship bundled .po/.mo (wordpress.org translation system)
* Display name: CookiePeak - Consent Banner (official cookiepeak.com plugin)

= 0.4.7 =
* Fix fatal TypeError in OAuth redirect: cookiepeak_settings_url() now accepts query arg arrays

= 0.4.6 =
* Plugin Check: remove hidden .gitkeep, set script version, max 5 tags
* Multilingual admin UI: English source + German (de_DE) translations
* load_plugin_textdomain for DE/EN based on WordPress site language

= 0.4.5 =
* Verified against WordPress 7.0.2 (Tested up to: 7.0)
* Re-checked Plugin Check findings before release

= 0.4.4 =
* Plugin Check fixes: cookiepeak_ / COOKIEPEAK_ prefixes
* Enqueue banner.js via wp_enqueue_script (no hardcoded script tags)
* Remove HEREDOC, improve sanitization / i18n
* Settings link on the Plugins screen
* English readme + Tested up to 7.0
* Document CookiePeak as external service

= 0.4.3-beta =
* Author: FloBa Media (product name remains CookiePeak)

= 0.4.2-beta =
* Plugin folder, ZIP and admin slug: CookiePeak / cookiepeak
* Display names fully switched to CookiePeak

= 0.4.1-beta =
* Default app URL: cookiepeak.com
* Migration from cookies.floba-media.de → cookiepeak.com
* Hourly banner.js cache busting

= 0.3.2-beta =
* Beta versioning (0.x)
* Consent unlock after accept (boot stub)
* Output-buffer blocking + cache purge on update

== Upgrade Notice ==

= 0.4.8 =
Plugin Review fixes. Shortcode is now [cookiepeak_settings]. Please update any old [cookie_settings] usages.

= 0.4.7 =
Fixes a fatal error after OAuth connect (settings URL helper type mismatch).

= 0.4.6 =
Fixes remaining Plugin Check items and adds German/English translations.

= 0.4.5 =
Verified on WordPress 7.0.2. Recommended before re-running Plugin Check.

= 0.4.4 =
Recommended before submitting to WordPress.org (prefixing, enqueue, English readme).
