Conversion.Business Gamified CAPTCHA is the definitive solution for WooCommerce checkout captcha and WordPress spam protection. We replace frustrating, high-friction image puzzles with delightful 2-5 second HTML5 micro-games.
Our zero-friction, privacy-first architecture stops bots, prevents WooCommerce card testing attacks, and keeps your human users happy. It is 100% ADA compliant and WCAG 2.1 accessible, ensuring no legitimate customer is ever blocked from checking out.
Important SaaS Disclosure: This plugin requires communication with external Conversion.Business servers to process CAPTCHAs and serve game assets securely. By using this plugin, you agree to our Terms of Service and Privacy Policy.
Conversion.Business CAPTCHA is a modern alternative to traditional picture-puzzle CAPTCHAs. Traditional CAPTCHAs (like identifying traffic lights) frustrate users and destroy your conversion rates.
Our plugin protects your WordPress login, registration, comments, and WooCommerce checkouts using fast, frictionless HTML5 micro-games and zero-telemetry behavioral validation.
Features
- Native GDPR Compliance (Zero Telemetry): We NEVER track mouse movements, harvest behavioral data, or use tracking cookies. 100% compliant with GDPR and ePrivacy directives out of the box.
- Zero-Friction: Replace annoying image puzzles with quick, fun interactions.
- WooCommerce Support: Native support for both Classic Checkout and modern WooCommerce Checkout Blocks.
- Spam is Always Free: Spam attacks are rejected at the edge and never count against your monthly quota. You only pay for legitimate, verified human solves.
- VIP Bypass: Automatically disable the CAPTCHA for your logged-in, authenticated customers to speed up their checkout process.
External services
This plugin relies on the Conversion.Business API to securely generate and validate gamified CAPTCHAs, protecting your site from bots without tracking user behavior.
- What data is sent and when:
- Upon plugin setup, the site URL and admin email are sent to generate your secure API keys.
- When a user submits a protected form, a hashed token containing the puzzle difficulty (Proof-of-Work) and solve time is sent to our validation servers. No personally identifiable information (PII), tracking cookies, or background mouse movements are sent or stored. (Privacy First Architecture).
- Service Providers & Domains:
conversion.business: Used to fetch the game list ecosystem configuration.conversion-business-widgets.web.app: Used for secure API interactions such as provisioning keys, validating connections, and synchronizing usage limits.
- Terms of Service: https://conversion.business/terms (Applies to all endpoints)
- Privacy Policy: https://conversion.business/privacy (Applies to all endpoints)