PAYGRAB

No. PAYGRAB does not connect to any outside service. The only request it makes is from your site to your own site, to check that the files you sell cannot be opened by anyone from outside (Settings → File protection). It does not track visitors.

Bank transfer, which you confirm by hand. Cards and PayPay need PAYGRAB Pro, a separate product.

Japanese yen, US dollars, euros and pounds sterling (one currency per site). The bank account is free lines of label and value, so any country's account fits (there are starting points for Japan, SEPA/IBAN, the UK and the US). For the tax you set its name, its rate (decimals are fine, 0 for none), whether the prices you enter include it, and how it is rounded; a product can have its own rate. Choosing the currency fills in the usual defaults, and each can be changed. Taxes that depend on the buyer's location (VAT on digital goods sold to consumers in the EU, US state sales tax) are not calculated: PAYGRAB applies the one rate you set.

In Japan, the buyer puts a 6-digit number in front of the transfer name. Elsewhere, the buyer enters the order number as the payment reference. You choose which in the settings; the currency picks the usual one.

So that each buyer has a My page with their orders and downloads, and so that a download link only works for the person who paid. Sign-up is free and, by default, confirmed by email. You can turn the email confirmation off in Settings → Pages and sign-up; the sign-up form then asks for the address twice and the person becomes a member right away.

In a folder with an unguessable name inside wp-content/uploads/paygrab-private/, protected from direct access. Files are only handed out by PAYGRAB, to the logged-in buyer of a paid order. On nginx, where .htaccess has no effect, the File protection screen tells you and shows the line to add to the server settings.

PAYGRAB sends email with the standard WordPress function. If your server cannot send mail reliably, install an SMTP plugin (such as WP Mail SMTP). Settings → Mail has a button to send a test email.

Name and email address (as WordPress users), their orders, and the download counts. To limit abuse, PAYGRAB keeps a short-lived counter per action and visitor address, stored as a hash, for up to an hour. Nothing is sent to anyone else.

Nothing is deleted by default, because orders are your accounting records. If you turn on "Also delete all PAYGRAB data when the plugin is deleted" (Settings → Data) before deleting it, PAYGRAB removes the order tables, the products, the files you uploaded, the settings and the pages it created (pages you edited are kept). Members stay as WordPress users. Deactivating the plugin never deletes anything.

Yes. With YOMERU - Paywall & Membership active, the buyer's page moves into YOMERU's My page as two tabs, and PAYGRAB's own My page redirects there.

Yes. With a TCD theme that offers the add-on tab hooks in its My page (PANDORA 3.8, VALUE 1.5 and BLAZE 2.4 or later), the buyer's page becomes two tabs ("Digital products" and "Downloads") inside the theme's My page, and PAYGRAB's own page redirects there. Without the hooks, or when another plugin or theme uses the address /mypage/, PAYGRAB's page is kept apart at /purchases/. Members are WordPress users shared by both, so one sign-up serves both. Leaving from PAYGRAB's My page deletes the whole account, so the other member features stop working too.

The settings and product screens are built with @wordpress/scripts. The source is in src/ and the build command is in package.json (npm install and npm run build).