=== LeadCop Disposable Email Checker ===
Contributors: benwildev
Tags: disposable email, email verification, spam protection, woocommerce, contact forms
Requires at least: 6.0
Tested up to: 7.0
Stable tag: 1.0.1
Requires PHP: 8.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Detect and block disposable emails, role accounts, and spam signups on WooCommerce checkout and WordPress forms.

== Description ==

LeadCop Disposable Email Checker connects your WordPress site to the LeadCop API to perform real-time verification and block invalid signups. The plugin prevents temporary burner emails from ever reaching your database, protecting your sender reputation, email deliverability, WooCommerce conversion analytics, and marketing forms.

== Third Party Services ==

LeadCop Disposable Email Checker relies on the LeadCop.io service to validate email addresses. During validation requests, the plugin transmits metadata and email addresses to the LeadCop API servers.

The plugin sends the following data to LeadCop.io when email validation is performed:

* Email address submitted by the user
* Website URL (used to verify API authorization and domain ownership)
* Validation metadata (form integration type and request source)

This data is transmitted securely over HTTPS and is used solely for email validation, disposable email detection, role-account detection, free email provider detection, and domain/TLD validation.

For details on data handling and user privacy, please refer to the:
* Privacy Policy: https://leadcop.io/privacy-policy
* Terms of Service: https://leadcop.io/terms-of-service

= Key Features =
* **Disposable Email Detection** - Automatically rejects temporary, single-use, and burner email addresses (e.g. Mailinator, TempMail).
* **Role Email Detection** - Detects and blocks generic team alias mailboxes (e.g., info@, sales@, support@) or warns users depending on your policy.
* **Free Provider Detection** - Optionally filters consumer accounts (gmail.com, yahoo.com) to force business/work signups on B2B forms.
* **Invalid TLD Detection** - Blocks invalid domain extensions/TLDs to prevent typing errors and invalid domains.
* **Spam Signup Prevention** - Blocks bots, spammers, and fake domains from registering accounts or submitting forms.
* **WooCommerce Checkout & Registration Protection** - Native integration to prevent checkout blockages or fake sales orders from temporary emails.
* **Newsletter Protection** - Includes a simple shortcode `[leadcop_subscribe]` and widget to capture and validate newsletter subscribers.
* **Onboarding Assistant** - Quick setup wizard guides you from API key entry to active form protection in less than 2 minutes.

= Developer-Friendly =
Includes the `leadcop_validate_email()` helper function for custom themes and custom forms. Done completely server-side, ensuring your API key is not exposed in public scripts.

== Installation ==

1. Upload the `leadcop-disposable-email-checker` folder to the `/wp-content/plugins/` directory, or install through **Plugins → Add New** by uploading the zip file.
2. Activate the plugin through the **Plugins** menu in WordPress.
3. Go to the **LeadCop** menu in your WordPress admin dashboard and follow the onboarding wizard.
4. Input your API key, click **Save Settings** to automatically validate connection, and toggle your desired integrations.

== Frequently Asked Questions ==

= Do I need a LeadCop account? =
Yes. Sign up at [leadcop.io](https://leadcop.io) to obtain your API key. A free tier is available to get you started.

= Is this plugin GDPR compliant? =
The plugin includes privacy disclosures and integrates with WordPress privacy policy tools. Site owners are responsible for ensuring compliance with applicable privacy regulations and should disclose that email addresses may be transmitted to LeadCop.io for validation.

= Will this slow down my forms or checkout? =
Each validation call adds a small, optimized network request (typically under 200ms). If you enable the live client-side validation, verification happens in the background when a user clicks out of the email field, preventing checkout delay.

= What happens if the LeadCop API is unreachable? =
The plugin fails open. If your site cannot reach the LeadCop API due to a network timeout, the form submission is allowed through. Your site's core functionality is not interrupted.

= Which form builders are supported? =
Out of the box, LeadCop integrates with:
* default WordPress User Registration
* WooCommerce Checkout & Registration
* Contact Form 7
* WPForms (Lite & Pro)
* Gravity Forms
* Elementor Pro Forms
* Ninja Forms
* Fluent Forms
* Formidable Forms
* WordPress Comments

= Is my API key secure? =
The API key is stored in the WordPress options table, and all API calls are executed server-side via PHP. It is not exposed in client-side scripts.

== Screenshots ==

1. Dashboard — Onboarding checklist and usage graphs.
2. Validation Rules — Toggle filters for disposable, role-based, and free emails.
3. Integrations — Native toggles for form builders and checkouts.
4. Analytics — 30-day volume metrics and outcomes breakdown charts.
5. Connection Status — Live account details and AppSumo billing tier statistics.

== Changelog ==

= 1.0.0 =
* Initial release.
* Added onboarding steps checklist.
* Added live account connection status card.
* Added native integrations for WPForms, Gravity Forms, Elementor Pro Forms, and Ninja Forms.
* Redesigned administration dashboard using LeadCop Orange brand theme.
* Implemented automatic background connection validation on settings save.
* Added Third-Party Service disclosures, Privacy Policy/TOS links, and GDPR compliance warnings.
* Email validation on WP registration, comments, WooCommerce, and Contact Form 7.
* Newsletter subscribe shortcode `[leadcop_subscribe]` and widget.