=== Trust Armory ===

Contributors: smollett
Tags: cookie consent, cookie banner, gdpr, privacy, compliance
Requires at least: 6.0
Tested up to: 7.1
Requires PHP: 7.4
Stable tag: 1.3.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Compliance you can actually manage. Site scans, consent records, policy generation, and protection against failed plugin updates for WordPress.

== Description ==

Most compliance plugins focus on displaying a cookie banner.

Trust Armory helps you manage compliance across your entire website by combining discovery, documentation, consent management, audit records, and plugin protection in a single WordPress-native platform.
Unlike many consent plugins, Trust Armory also includes Plugin Protection. 

**Discover. Document. Protect.**

Core features include:

* Site Scan for common tracking technologies
* Compliance Dashboard
* Consent Audit Log
* Consent Banner (Accept All, Reject All, Manage Preferences)
* Cookie Category management, with ready-made presets
* Privacy Policy Generator
* Cookie Policy Generator
* Compliance Assistant
* Protected Updates
* Backup Before Update

Trust Armory helps you:

* Discover what tracking technologies are running on your website
* Manage visitor consent and preferences
* Generate policy drafts from information you've already configured
* Store consent records in your own WordPress database
* Keep records under your control
* Recover quickly from failed plugin updates

**Privacy by design**

Trust Armory:

* Stores data locally
* Makes no outbound API calls
* Does not transmit consent records externally
* Does not require a cloud service
* Does not require visitor-based pricing
* Works entirely inside WordPress

This plugin provides practical compliance guidance, not legal advice. Generated policies and recommendations should always be reviewed before publication.

== Installation ==

1. Install Trust Armory from the WordPress Plugin Directory or upload it manually.
2. Activate the plugin through the Plugins screen in WordPress.
3. Open Trust Armory from the WordPress admin menu.
4. Run a Site Scan and configure your consent preferences.
5. Generate policies, review recommendations, and start managing compliance.

== Screenshots ==

1. Compliance Dashboard
2. Site Scan
3. Protection Centre
4. Consent Audit Log
5. Compliance Assistant
6. Service Management
7. Policy Generator

== Changelog ==

= 1.3.0 =

* Simplified dashboard rendering to a fixed, single layout.

= 1.2.0 =

* Removed unused category helper methods and simplified category management.
* Simplified banner, category, and floating icon settings handling.
* Refactored dashboard rendering and moved frontend behaviour into properly registered assets.
* Clarified in the External Services section of this readme that Site Scan's tool-recognition list (Stripe, Intercom, TikTok Pixel, HubSpot, and others) is signature-detection only, run against your own site's already-rendered HTML - the plugin does not contact any of these services itself.

= 1.1.0 =

* Removed backup-count limits from Plugin Protection.
* Removed rollback functionality.
* Simplified several admin interfaces and removed unused settings previews.
* Moved several inline <script>/<style> blocks (Plugins list page, Protected Updates screen) to properly enqueued/localized files.
* Added input sanitisation and validation improvements.
* Added an External Services section documenting recognised third-party services detected by Site Scan.

= 1.0.1 =

* Fixed: Improved spell-check behaviour in the Services screen.
* Update: The folder path for the protected plugins to wp-content/protected-plugins.
* Update: The dialogs displayed in the TrustArmory WP-Admin space are now using custom message boxes.
* Update: Modified the layout of the Dashboard Header.

= 1.0.0 =

* Initial public WordPress.org release.
* Compliance Dashboard.
* Site Scan.
* Consent Banner and Preferences Modal.
* Consent Audit Log.
* Cookie Category management with presets.
* Service Management.
* Policy Generator.
* Compliance Assistant.
* Plugin Protection.
* Protected Updates.
* Backup Before Update workflow.

== Upgrade Notice ==

= 1.0.0 =

Initial public release of Trust Armory.

== External services ==

Trust Armory can detect a range of common third-party analytics, advertising, chat, video, and embedded tracking technologies through its Site Scan feature.

Separately, the Site Scan feature makes an HTTP request to your own site's public pages (the same pages a visitor's browser would load) to look for known tool signatures already present in your page source - not just the six above, but a broader recognition list that also includes tools such as Stripe, Intercom, HubSpot, TikTok Pixel, Hotjar, Microsoft Clarity, and reCAPTCHA, among others. This is a request to your own site, not to any third-party service: the plugin does not contact Stripe, Intercom, or any of these other tools, it only recognises their signatures in HTML your own site already served. Results are stored only in your WordPress database.

== Frequently Asked Questions ==

= What makes Trust Armory different? =

Most consent plugins focus on presenting a banner.

Trust Armory combines discovery, documentation, audit records, consent management, policy generation, and plugin protection into a single WordPress-native workflow.

= What happens if a plugin update breaks my site? =

Trust Armory can create a recovery point before updating a plugin and helps maintain protected plugin versions for recovery purposes.

= Does Trust Armory store data externally? =

No. Consent records and configuration data remain inside your WordPress installation.

= Is Trust Armory a cloud service? =

No. Trust Armory works entirely inside WordPress and does not require an external account.

= Is Plugin Protection the same as a full website backup? =

No.

Plugin Protection creates recovery points for individual plugins before updates, helping preserve previous plugin versions for recovery purposes.

It is not a replacement for a complete website backup.