CoderEmbassy Order Vanguard

Order Vanguard protects classic checkout, Checkout Block, Store API cart traffic, and Store API batch requests with monitor-first circuit breakers, request controls, lists, and review signals. The Free plugin has no CAPTCHA keys, subscriptions, remote scoring services, or external data transfers.

For product quantity rules and customer-friendly purchase limits, see CoderEmbassy Quantity Manager for WooCommerce.

Privacy

Order Vanguard stores protection events only in this site’s WordPress database. A log row can contain the event time and type, protection mode, request route, reason, order ID, a sanitized user agent, ip_display, and a one-way ip_hash correlation value.

By default, IPv4 addresses are anonymized by replacing the last octet with zero. IPv6 addresses are reduced to their /64 network. The correlation hash is generated locally with HMAC-SHA256 and the site’s WordPress authentication salt. It is used to recognize repeat traffic without storing the original address in the hash. Email counters use the same one-way approach over a lowercased email address; plaintext email addresses are not written to the protection log.

Full IP display storage is optional and disabled by default. Enabling it may store personal data and should be covered by the site’s privacy policy and legal basis.

Activity history is retained for seven days and pruned daily in bounded batches. Nothing is sent to CoderEmbassy or any third party. The merchant can choose to remove the plugin’s table and options during uninstall.

Source Code and Build Process

The complete human-readable source code, build configuration, and release tools are publicly maintained at github.com/salehST/coderembassy-order-vanguard.

The generated build/index.js and styles are compiled from the files in src/. To reproduce the distributed assets, install a current Node.js LTS release and run these commands from the repository root:

npm ci
npm run build
npm run make-pot
npm run release:audit
npm run package:release

The build uses the WordPress packages listed in package.json and lucide-react, an ISC-licensed icon library. Exact dependency versions and source package URLs are recorded in package-lock.json.