Checkout Bouncer

Terms

The licence, the limits, and what no security tool can promise.

On this page13 sections
  1. The short version
  2. 1. Who we are, and what these terms of use cover
  3. 2. The plugin licence
  4. 3. The free version is provided as-is
  5. 4. What no security tool can promise
  6. 5. Your responsibilities as the merchant
  7. 6. Limitation of liability
  8. 7. Acceptable use of this website
  9. 8. Third-party services
  10. 9. Pro, the waitlist, and support
  11. 10. Changes to the plugin and to these terms of use
  12. 11. Severability and waiver
  13. 12. Contact

Legal

These terms of use cover the checkoutbouncer.com website and the free Checkout Bouncer plugin for WooCommerce. NeoDigify operates both. Checkout Bouncer scores checkout traffic with Google reCAPTCHA v3 and blocks the routes that cannot carry a token. It is a fraud filter, not a guarantee, and the terms below say exactly what that means.

Last updated: August 2026

The short version

  • The free plugin is licensed under the GPL, version 2 or later. You can use it on as many sites as you like.
  • It is provided as-is, with no warranty. We build it carefully and test it, but we cannot promise it is faultless.
  • No security tool stops every bot. Checkout Bouncer raises the cost of attacking your checkout. It does not remove your responsibility for fraud controls and gateway settings.
  • Pro is not for sale yet. Nothing on this site takes payment. We will publish Pro terms when Pro ships.

This summary is here to be helpful. The numbered sections below are the terms that actually apply. This page is not legal advice; if you need advice about your own situation, speak to a qualified lawyer.

1. Who we are, and what these terms of use cover

Checkout Bouncer is the work of NeoDigify (“we”, “us”, “our”). These terms of use apply to two things: the checkoutbouncer.com website, including its documentation and any waitlist forms; and the free Checkout Bouncer plugin distributed on WordPress.org.

By using the website, or by installing and running the plugin, you accept these terms of use. If you do not accept them, do not use the site and remove the plugin from your store. Where the plugin’s GPL licence and these terms of use disagree about your rights to the plugin’s code, the GPL wins.

Our privacy notice sets out separately how the plugin handles data.

2. The plugin licence

The free Checkout Bouncer plugin is licensed under the GNU General Public License, version 2 or (at your option) any later version. That is the standard licence for WordPress plugins, and it gives you real rights:

What you may do

  • Install it on any number of sites, yours or your clients’.
  • Read, study and modify the source code.
  • Redistribute it, modified or not, under the same GPL terms.
  • Use it commercially, including inside paid client work.

What the licence does not give you

  • Rights to the Checkout Bouncer and NeoDigify names, logos or branding. Those stay ours. If you distribute a modified copy, please give it a different name so nobody confuses who supports it.
  • Rights to the text, layout and images of this website, which are not GPL and remain our copyright.
  • Any warranty or support commitment. See sections 3 and 6.

3. The free version is provided as-is

Checkout Bouncer is supplied without warranty of any kind, express or implied, including any implied warranty of merchantability, fitness for a particular purpose, or non-infringement. We do not warrant that the plugin will be uninterrupted, error-free, compatible with every theme, page builder or extension you have installed, or that it will block any particular bot, order or attack.

That wording is standard for GPL software, but we mean it in a practical sense too. Checkout Bouncer runs inside your store, alongside WordPress, WooCommerce, your theme and everything else you have installed, and it depends on a Google service we do not control. Test it on a staging copy first, keep backups, and watch your events log for the first few days after you turn blocking on.

The plugin requires WordPress 6.2 or later, PHP 7.4 or later, and WooCommerce 7.0 or later. We do not support installations below those versions.

4. What no security tool can promise

Checkout Bouncer uses Google reCAPTCHA v3. reCAPTCHA v3 does not ask the visitor to solve anything. It watches behaviour and returns a score between 0.0 and 1.0, where higher means more human-like. Your threshold decides where the line sits. Google recommends 0.5, and that is our default.

Be clear-eyed about what that means. A score is a judgement, not a fact. Raise the threshold and you stop more bots, but you will eventually stop a real customer on a locked-down browser, a VPN or a corporate network. Lower it and more real customers get through, along with more of the traffic you were trying to stop. There is no setting that blocks every attacker and no genuine buyer. The same trade-off applies to the order-rate throttle: an hourly limit that stops a card-testing run can also catch an unusually busy legitimate customer, which is why we ship a monitor mode that logs without blocking so you can tune it against your own traffic first.

You should also know what the plugin deliberately does not cover, so you can plan the rest of your defences:

  • It protects the checkout. It does not protect login, registration, comments or contact forms.
  • It supports reCAPTCHA v3 only. There is no v2 checkbox, no hCaptcha and no Turnstile.
  • It is not a firewall and not a malware scanner. It will not clean an already compromised site.
  • It depends on Google’s reCAPTCHA service. If that service is unreachable and you have fail-open enabled, orders keep flowing unscored, by your own choice.
  • Attackers adapt. A method that blocks an attack today may fail tomorrow, which is why the Checkout Scanner is something to re-run after you change your checkout, not a one-time task.

5. Your responsibilities as the merchant

Checkout Bouncer is one layer. Running a shop that takes card payments makes you responsible for the rest, and installing our plugin does not transfer that responsibility to us. In particular, you remain responsible for:

  • Your payment gateway settings. Fraud rules, 3-D Secure, AVS and CVC checks, velocity limits and radar-style filters live with your gateway. Configure them. Checkout Bouncer stops traffic before it reaches the gateway; it does not replace the gateway’s own controls.
  • Testing your own configuration. Place a real test order after changing the threshold, the throttle limits, per-gateway targeting or any Block action, and confirm a genuine customer can still buy.
  • Your reCAPTCHA keys. They are yours, obtained free from Google, and using them means agreeing to Google’s terms. Keep the secret key private.
  • Anything you block. If you hard-block the Store API checkout route or a duplicate checkout page, you are changing what your site serves. Make sure nothing legitimate depended on it.
  • Backups, updates and hosting. Keep WordPress, WooCommerce, your theme and your plugins current, and keep a restore point.
  • Your own legal duties. Consumer law, tax, chargeback handling and data protection notices for your customers are yours to meet.

6. Limitation of liability

We give the free plugin away and we take no payment for it. To the fullest extent the law allows, NeoDigify is not liable to you for any lost sales, lost profits, lost or corrupted data, chargebacks, gateway fees, fraud losses, downtime, reputational harm, or any indirect or consequential loss, arising from your use of the plugin or this website. That includes losses caused by a bot the plugin did not stop and losses caused by a genuine customer the plugin did stop.

Where liability cannot lawfully be excluded, our total liability to you for all claims combined is limited to the amount you have paid us in the twelve months before the claim, which for the free plugin is nil.

Nothing in these terms of use limits liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for anything else that cannot be limited under the law that applies to you. If you are a consumer, your statutory rights are unaffected.

7. Acceptable use of this website

You are welcome to read, quote and link to anything here. You may not:

  • Attack the site, scan it for vulnerabilities without our written permission, or try to gain access to anything not published for you.
  • Scrape or automate requests at a rate that degrades the site for others.
  • Submit someone else’s email address to the Pro waitlist, or submit false details to a form.
  • Republish our website copy as your own, or use our branding in a way that suggests we endorse or support your product.
  • Use anything you learn here to help you attack someone else’s checkout.

We may withdraw access to the site, or to support, from anyone who does these things. We may also change, move or remove any page on this site at any time, including documentation, without notice.

8. Third-party services

Checkout Bouncer needs your own free Google reCAPTCHA v3 site key and secret key. Your use of reCAPTCHA is a matter between you and Google, under Google's terms and privacy policy, not ours. The plugin loads Google’s reCAPTCHA script; by default it loads sitewide, because v3 scores a visitor on their behaviour across the whole site, which is what Google recommends. You can narrow it to checkout screens only if you prefer, at some cost to score quality.

We do not control Google’s service, its availability, its pricing tiers, or how it scores any particular visitor. If Google changes or withdraws reCAPTCHA v3, parts of the plugin will stop working and we may have to change it in response.

WordPress.org distributes the free plugin, and its own terms and guidelines apply to that download. Our privacy notice explains what data the plugin records in its events table on your own server.

9. Pro, the waitlist, and support

Pro remains a plan. It is not released, it is not on sale, and this site takes no payment of any kind today. If you join the waitlist you are asking us to email you when Pro exists; you are not buying anything and you are not committed to buying anything. Ideas we are working on for Pro, such as a shared threat intelligence blocklist, an agency multi-site dashboard, edge blocking through Cloudflare, alerts and digests, longer log retention and priority support, are plans rather than promises, and the final list may differ.

Separate Pro terms, covering payment, renewals, refunds and support commitments, will be published on this site before Pro goes on sale. Those terms will apply to Pro; these terms of use will continue to apply to the free plugin and to this website.

Support for the free version is best-effort. We read the WordPress.org support forum and email, and we answer what we can, but the free version comes with no guaranteed response time and no service level commitment.

10. Changes to the plugin and to these terms of use

We update the plugin as WordPress, WooCommerce and attacker behaviour change. Features may be added, changed or removed between versions. Notable changes are listed on the changelog. You choose when to apply updates, and you should read the changelog before updating a live store.

We may also revise these terms of use. The version published on this page is the one that applies, and the “last updated” date at the top tells you when it changed. If you keep using the site or the plugin after a change, you accept the revised terms.

11. Severability and waiver

If any part of these terms of use is found to be unenforceable, the rest stays in force. Our not enforcing a term on one occasion does not mean we have given it up.

12. Contact

Questions about these terms of use, the licence, or anything else on this page go to support@checkoutbouncer.com. Tell us your WordPress, WooCommerce and plugin versions if it is a technical question, and we will get to it as quickly as we can.

Get support Read the privacy notice

Last updated: August 2026. These terms of use are written in plain English so a shop owner can read them without a lawyer, but they are not legal advice and they are not tailored to your business. If the stakes are high for you, get advice from a qualified professional in your own country.

See which doors into your checkout are standing open

Scan my checkout Get the free plugin (on WordPress.org)