Title: Vendusio Checkout Network Author: Vendusio Ltd Published: November 8, 2026 Last modified: November 8, 2026 --- Search plugins ![](https://ps.w.org/vendusio-checkout-network/assets/icon-256x256.png?rev=3791342) # Vendusio Checkout Network By [Vendusio Ltd](https://profiles.wordpress.org/massimomatarrese/) [Download](https://downloads.wordpress.org/plugin/vendusio-checkout-network.1.1.25.zip) * [Details](https://wordpress.org/plugins/vendusio-checkout-network/#description) * [Reviews](https://wordpress.org/plugins/vendusio-checkout-network/#reviews) * [Installation](https://wordpress.org/plugins/vendusio-checkout-network/#installation) * [Development](https://wordpress.org/plugins/vendusio-checkout-network/#developers) [Support](https://wordpress.org/support/plugin/vendusio-checkout-network/) ## Description **Make more of every completed order.** Vendusio Checkout Network brings the Vendusio GiftBox to your WooCommerce order- confirmation (Thank-You) page. After the purchase is complete, customers can explore relevant offers from participating advertisers, creating an additional opportunity to get value from your existing post-purchase traffic without adding steps to checkout or payment. This plugin uses the external [Vendusio Ads](https://vendusio.com/) service. An account, authorised domain and public key are needed; no local plugin license or feature unlock is required. **Post-purchase monetization: choose the right program** Vendusio offers distinct commercial programs for stores that host the GiftBox: * **Distributor – advertising revenue sharing:** Eligible, approved high-volume ecommerce sites may host the GiftBox without running their own ad campaigns and receive an agreed share of net Cost Per Engagement (CPE) revenue actually collected by Vendusio from valid offer reveals attributed to their site. Distributor eligibility, volume requirements and approval apply. * **Publisher – advertise and host:** Stores can host the GiftBox and also advertise their own offers through Vendusio. The Publisher benefit is preferential CPE advertising rates under the applicable terms, rather than the Distributor revenue share. **A GiftBox impression is not a paid event.** Merely displaying or opening the GiftBox does not generate a payout. Revenue sharing is conditional on program eligibility and valid, collected engagement revenue; earnings and results are not guaranteed. [Compare the programs and current terms](https://vendusio.com/monetize/). **What the plugin does** * Automatically places the GiftBox after a completed WooCommerce order when enabled. * Provides the `[vendusio_checkout_banner]` shortcode for manual placement on supported pages. * Connects or rechecks a configured domain through Vendusio’s Alive telemetry signal; optional site-wide heartbeat can be enabled separately, and is off by default. * Uses a version-pinned HTTPS bootstrap with SHA-384 Subresource Integrity (SRI). * Offers WordPress admin settings for the public key and automatic GiftBox display. * Works without WooCommerce for supported manual shortcode placements; automatic order-confirmation placement requires WooCommerce. The plugin does not modify checkout, manage campaigns or determine program eligibility. These are handled by Vendusio. **External service, data and privacy** This plugin connects to Vendusio Ads, an externally hosted advertising and attribution service operated by Vendusio Ltd. Saving a public Vendusio integration key **does not enable site-wide heartbeat**. The optional site-wide domain heartbeat setting is **off by default** and requires an explicit administrator action. If enabled, the external Vendusio script loads on ordinary non-admin public pages and makes HTTPS requests to the Vendusio service for JWT authorization and domain-status (` alive`) telemetry, as described below. The requests include a pseudonymous browser ID, public integration key and order or technical reference, but do not explicitly include IP address or User-Agent as application payload parameters. The WooCommerce order-confirmation GiftBox, when configured, uses the same external service but is controlled separately from site-wide heartbeat. Disable both integration features or remove the public key to stop frontend script loading by this plugin. Administrators must implement applicable visitor consent controls (for example via their consent- management solution), as a WordPress administrator setting by itself does not constitute a visitor’s consent. This plugin does not provide a built-in visitor consent banner. **Browser identifier and site-wide heartbeat:** When the Vendusio browser script is loaded, it may generate a random 32-character hexadecimal `browser_id` in the browser and keep it in the site’s `localStorage` under `vnd:browser-id:v1`, reusing it for subsequent visits until browser storage is cleared. This pseudonymous browser identifier is sent in the query string of HTTPS requests to the Vendusio `/jwt` endpoint, together with the public integration key and an order or technical session reference. It is also sent when the optional site-wide heartbeat is enabled: the heartbeat’s `/jwt` request occurs when the script initializes, while the following` alive` event to `/telemetry` is locally limited to at most once every six hours per browser/key/site combination. In heartbeat-only mode the script does not fetch offers, display the GiftBox or register offer views/reveals. The heartbeat application payload does not explicitly include an IP address or User-Agent. However, a server receiving an HTTPS request can see the connecting IP address and may receive the browser’s User-Agent HTTP header. Vendusio Proxy currently forwards that header and derives HMAC-based anti-abuse values from connection details; these are HTTP/ proxy processing details, not extra fields in the heartbeat JSON payload. The heartbeat and browser identifier are not enabled for ordinary public pages unless the administrator explicitly enables site-wide heartbeat; a separately configured order-confirmation GiftBox continues to load Vendusio’s browser script for its service functions. The plugin does not itself manage visitors’ consent, which remains the site’s responsibility where applicable. For checkout integration, the PHP portion passes a public key, a limited order reference and, where supplied, a commercial market-country code to the Vendusio script. It does not intentionally include purchased items, order totals, customer names, billing/ shipping addresses, customer email or payment-card data in those parameters. An order reference may nevertheless be personal data when linkable to a shopper. The browser-side integration can read applied coupon codes where available and transmit offer/claim references, impression/open/reveal/click and attribution events, as well as the shop domain. It does not add IP address or User-Agent as explicit fields to these event payloads; connection IP, User-Agent HTTP headers and HMAC-derived anti-abuse values may nonetheless be processed by the Vendusio service and Proxy. Browser storage can be used for session state, attribution and domain heartbeat. An email is collected for marketing only if the shopper submits a separate optional promotional opt-in form. Remote resources and connection requests: * Pinned public-page bootstrap: `https://vendusio.com/vendusio-sri/vendusio-bootstrap- e132abb94a5d.php` * Connect/Recheck: `https://vendusio.com/wp-json/vendusio-proxy/v1/jwt` * Connect/Recheck telemetry: `https://vendusio.com/wp-json/vendusio-proxy/v1/telemetry` Connect/Recheck updates the local connection indicator after confirmed telemetry. HTTPS and SHA-384 SRI verify script bytes, but do not sandbox JavaScript or replace consent. CSP may need to allow Vendusio endpoints. Avoid duplicate GiftBox installations. Vendusio Ltd, 20/22 Wenlock Road, London N1 7GU, United Kingdom, company no. 17540120. Support: support@vendusio.com. * [Service and integration details](https://vendusio.com/security-privacy-integration/) * [Terms and conditions](https://vendusio.com/terms-conditions-partners/) * [Privacy policy](https://vendusio.com/privacy-policy/) * [Data protection roles](https://vendusio.com/data-protection-roles/) ## Screenshots [⌊Vendusio GiftBox displayed on a WooCommerce order-confirmation page, presenting relevant offers after checkout.⌉⌊Vendusio GiftBox displayed on a WooCommerce order- confirmation page, presenting relevant offers after checkout.⌉[ Vendusio GiftBox displayed on a WooCommerce order-confirmation page, presenting relevant offers after checkout. [⌊An unlocked offer showing the customer's benefit and the option to visit the advertiser.⌉⌊ An unlocked offer showing the customer's benefit and the option to visit the advertiser .⌉[ An unlocked offer showing the customer’s benefit and the option to visit the advertiser. [⌊Vendusio Checkout Network settings in WordPress, including the public key, GiftBox display options and domain connection status.⌉⌊Vendusio Checkout Network settings in WordPress, including the public key, GiftBox display options and domain connection status.⌉[ Vendusio Checkout Network settings in WordPress, including the public key, GiftBox display options and domain connection status. [⌊Illustrated overview of the post-purchase journey: completed order, GiftBox presentation, offer reveal and business growth opportunities.⌉⌊Illustrated overview of the post- purchase journey: completed order, GiftBox presentation, offer reveal and business growth opportunities.⌉[ Illustrated overview of the post-purchase journey: completed order, GiftBox presentation, offer reveal and business growth opportunities. ## Installation 1. Install and activate Vendusio Checkout Network in WordPress. 2. [Create or access your Vendusio account](https://vendusio.com/) and choose the relevant Publisher or Distributor path. Distributor revenue-sharing access requires eligibility review and approval. 3. Authorise your store domain in Vendusio and copy its **Public key** from Developer Hub. 4. Open **Vendusio** in the WordPress admin, paste the public key and click **Save settings**. Saving the key alone does not enable the optional site-wide heartbeat loader. 5. With WooCommerce active, Auto-open controls GiftBox display on the order-confirmation page. For manual placement, disable automatic display and add `[vendusio_checkout_banner]` to a suitable page. The optional site-wide heartbeat setting is independent and initially OFF. 6. Click **Connect** or **Recheck** to report domain Alive telemetry. Site-wide heartbeat, if needed, must be explicitly enabled using its separate checkbox after configuring privacy notices and any necessary visitor consent handling. Verify the GiftBox on a test order-confirmation page and check consent/CSP configuration. ## FAQ ### How can a WooCommerce store benefit financially from the GiftBox? Vendusio offers different programs. Approved Distributors may share in eligible CPE revenue actually collected from their GiftBox; Publishers may qualify for preferential advertising rates when hosting and advertising. Installing the plugin alone does not generate earnings. See [current eligibility and commercial terms](https://vendusio.com/monetize/). ### Does every GiftBox view or impression earn revenue? No. Impressions and GiftBox openings are not paid events. The Distributor program is based on valid offer reveals, applicable checks and eligible CPE revenue actually collected by Vendusio. No revenue is guaranteed. ### Is WooCommerce required? WooCommerce is required for automatic placement on the order-confirmation page. Supported manual placements can use the shortcode on WordPress without WooCommerce. ### Does the GiftBox interrupt checkout or payment? No. Automatic placement is on the order-confirmation page after the WooCommerce order has been completed. ### Can I place the GiftBox manually? Yes. Use `[vendusio_checkout_banner]`. Disable Auto-open if you do not want automatic placement. Only use supported placements and avoid duplicate integrations. ### Do I need a Vendusio account? Yes. A Vendusio business account, an authorised domain and a Public key are necessary for the external service. Commercial participation depends on the program and its terms; the WordPress plugin does not locally restrict bundled features by license. ### Can I advertise my own offers from this plugin? This plugin integrates the GiftBox. Publishers create and manage campaigns in the Vendusio dashboard. ### Can I turn off the site-wide script while keeping the public key? Yes. Site-wide heartbeat is a separate setting that is OFF by default. Disabling it prevents the automatic heartbeat script on ordinary pages while retaining the configured public key and the post-checkout GiftBox (if enabled). Disable Auto-open and avoid the shortcode as well to stop other frontend script loads. For consent- sensitive deployments, configure a consent-management solution for the GiftBox itself. ### What data is shared with Vendusio? The integration uses a public key and limited order reference, plus market information if supplied, and may transmit interaction/technical data through its browser-side service. It is not designed to import order items, totals, billing/shipping details or card information. Read **External service, data and privacy** above and the [privacy policy](https://vendusio.com/privacy-policy/). ### Does Vendusio store a browser identifier? Yes. When Vendusio’s browser integration runs (either for the GiftBox or for the separately enabled site-wide heartbeat), it can create and store a random `browser_id` in site-local `localStorage` and send it to the Vendusio `/jwt` service with the public key and an order or technical session reference. The identifier persists until browser storage is cleared. See **External service, data and privacy** for details and consent considerations. ### Where can I get support? Contact support@vendusio.com. The [Vendusio website](https://vendusio.com/) also provides business account and integration information. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “Vendusio Checkout Network” is open source software. The following people have contributed to this plugin. Contributors * [ Vendusio Ltd ](https://profiles.wordpress.org/massimomatarrese/) * [ vendusio ](https://profiles.wordpress.org/vendusio/) [Translate “Vendusio Checkout Network” into your language.](https://translate.wordpress.org/projects/wp-plugins/vendusio-checkout-network) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/vendusio-checkout-network/), check out the [SVN repository](https://plugins.svn.wordpress.org/vendusio-checkout-network/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/vendusio-checkout-network/) by [RSS](https://plugins.trac.wordpress.org/log/vendusio-checkout-network/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.1.25 * Clarified the distinction between explicit browser-side data fields and standard HTTP/proxy connection information in privacy disclosures. * Documentation wording only; no changes to GiftBox, heartbeat, JWT, Proxy or API behavior. #### 1.1.24 * Disclosed the exact browser identifier (`browser_id`) usage in the external-service privacy documentation, including site-local storage, JWT transfer and heartbeat cadence. * Documentation-only release; no changes to script behavior, consent settings, GiftBox, JWT or API integration. #### 1.1.23 * Added a separate opt-in for site-wide domain heartbeat, OFF by default, to prevent the public key from automatically triggering a script across ordinary pages. * Documented admin opt-in, visitor-consent obligations and independent GiftBox behavior. No changes to the pinned script, SRI, order/shortcode rendering or proxy Connect/Recheck. #### 1.1.22 * Improved WordPress.org listing copy, program explanations, setup instructions and FAQs, highlighting post-purchase monetization while distinguishing Publisher and Distributor benefits. * Added five discovery tags and retained external-service, security and privacy disclosures. * Documentation and plugin metadata update only. GiftBox scripts, endpoints, SRI, WooCommerce integration and telemetry logic are unchanged. #### 1.1.21 * Resolved the last Plugin Check resource version warning without modifying the pinned bootstrap URL or SRI hash. #### 1.1.20 * Aligned script enqueueing and compatibility checks with WordPress APIs, and improved repository disclosures. #### 1.1.19 * Updated service ownership and data-flow documentation. Earlier release notes are included in `changelog.txt`. ## Meta * Version **1.1.25** * Last updated **1 day ago** * Active installations **Fewer than 10** * WordPress version ** 5.9 or higher ** * Tested up to **7.1.4** * PHP version ** 7.4 or higher ** * Tags * [advertising](https://wordpress.org/plugins/tags/advertising/)[checkout](https://wordpress.org/plugins/tags/checkout/) [monetization](https://wordpress.org/plugins/tags/monetization/)[post-purchase](https://wordpress.org/plugins/tags/post-purchase/) [woocommerce](https://wordpress.org/plugins/tags/woocommerce/) * [Advanced View](https://wordpress.org/plugins/vendusio-checkout-network/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/vendusio-checkout-network/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/vendusio-checkout-network/reviews/) ## Contributors * [ Vendusio Ltd ](https://profiles.wordpress.org/massimomatarrese/) * [ vendusio ](https://profiles.wordpress.org/vendusio/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/vendusio-checkout-network/)