About this plugin
Stripe and PayPal payments. No WooCommerce required.
OfferPact Checkout adds a popup checkout to WordPress for fixed-price products and services, email capture and optional checkout recovery.
Included in Free
- Stripe and PayPal: either or both, with embedded checkout and redirect fallbacks.
- Payment buttons: add the Checkout Button block or [ivcc_buy_button offer="123"]. Set a product’s price, currency and payment methods.
- Email capture: inline, a separate step, or off.
- Checkout recovery: one reminder and two optional follow-ups, with timing, text and a personal checkout link. Reminders stop after payment or unsubscribe and are off on new installs.
- Orders and refunds: inspect payment attempts and issue full or partial refunds through the original provider.
- Your appearance: Light, Dark or Custom colours, button styles, provider ordering and per-product trust text with a policy link.
- After payment: show confirmation or redirect to a chosen page after verification. Order summaries use [ivcc_order] or [ivcc_order_summary].
- Branded emails: logo, colours, footer and support contact, HTML/plain-text versions, previews and test emails.
No IVIA CODE account, licence key or paid activation is required. There are no commercial quotas on products, orders, revenue or reminders; security limits and suppression still apply. IVIA CODE adds no transaction surcharge.
Provider processing fees apply.
Prices and payments are server-verified; card data goes directly to providers. Built-in rate limits, bot checks and optional Turnstile help protect checkout. Orders and contacts stay in your database.
This release has no subscriptions, inventory, shipping or automatic file delivery. Arrange fulfilment separately or through verified purchase hooks.
External services
Services connect only after the administrator configures them. Stripe and PayPal are independent third parties; this is not an official or endorsed provider plugin.
Stripe
Creates checkout sessions, verifies payments, processes refunds and sends webhooks. Sent: product name, amount/currency, buyer email, site return URLs and internal order references. Card details go directly to Stripe-hosted fields.
Used when buyers choose Stripe and during connection/webhook setup or refunds. js loads after checkout opens.
com/legal
com/privacy
PayPal
Creates/captures orders, processes refunds and verifies/receives webhooks. Sent: product name, amount/currency, optional buyer email, return URLs and order references. Used when buyers choose PayPal and during connection/webhook setup or refunds.
com/web-sdk/v6/core).
com/legalhub/home
com/myaccount/privacy/privacyhub
Cloudflare Turnstile (optional; off by default)
Checks for bots when checkout opens, an email is saved or payment starts. Sent: verification token, visitor IP for server verification, and technical browser data collected by Cloudflare’s script. js
com/website-terms/
com/privacypolicy/
Meta Pixel bridge (optional; off by default)
After a verified live purchase, calls an existing, separately loaded site Pixel with value, currency, product ID/SKU, name, quantity and stable event ID. It sends no buyer email/name and excludes test purchases. Meta’s existing script may collect browser identifiers and technical data under the site’s configuration.
The merchant must obtain required consent before loading the Pixel; no cookie consent manager or Pixel loader is included.
com/legal/terms
com/privacy/policy/
The plugin sends no data to IVIA CODE and installs no analytics or advertising scripts. Leave the bridge off if unused.
Privacy
Stored locally: buyer email/name when requested, consent, orders/payments and email history with hashed addresses. Unpaid contacts expire after a configurable period (default 180 days). WordPress data export and erasure are supported; financial records are anonymised rather than deleted.
Uninstall normally retains accounting records and product settings. Credentials, signing keys, temporary security state and scheduled work are removed, and pending emails cancelled. A keyed identity remains solely to honour unsubscribe/erasure after reinstall.
Reconnect providers after reinstall. Enable Delete all checkout data in Privacy to also remove plugin tables, products and settings.
Payment attempts have network, email, session and store-wide rate limits; safe retries reuse unpaid attempts. Trusted reverse proxies require the server-side ivcc_trusted_proxies filter; other forwarded headers are ignored. IPv6 /64 shares a network limit.
Enabled bot verification fails closed if unavailable.