topsyde

CountryLock provides a simple, lightweight way to allow or block countries from accessing your WordPress site.
It’s designed to be “set it and forget it” with no upsells, ads, or complex configurations.
<h3>✨ Key Features</h3>
<ul>
<li>Master Toggle: Enable or disable the firewall with a single click.</li>
<li>Allowed Countries List: Specify which two-letter country codes (e.g., <code>US</code>, <code>CA</code>) are allowed. Everyone else is blocked.</li>
<li>Admin Bypass: Logged-in administrators can always bypass the block (toggleable).</li>
<li>IP Allowlist: A simple list of IPs or CIDR ranges (like <code>123.45.67.89</code> or <code>10.0.0.0/8</code>) that are always allowed.</li>
<li>Block Logging: See which countries and IPs are being blocked (toggleable).</li>
<li>Zero-Lookup Detection: Automatically uses Cloudflare (<code>HTTP_CF_IPCOUNTRY</code>) and other common server-level GEO headers for instant decisions with zero performance impact.</li>
<li>Remote Lookup: As a fallback, it can query an external service (<code>ipapi.co</code>) if no headers are found.</li>
</ul>
<h3>External Services</h3>
This plugin uses one external service as a fallback to determine a visitor’s country if no local GEO headers (like those from Cloudflare or a server-level GeoIP module) are present.
<ul>
<li>Service: <code>ipapi.co</code></li>
<li>What it’s used for: To look up the country of origin for a visitor’s IP address.</li>
<li>Data Sent: The visitor’s IP address is sent to the service. This happens only if the “Use remote lookup if no geo headers” setting is enabled AND no local GeoIP headers are detected.</li>
<li>Service Policies:
<ul>
<li><a href="https://ipapi.co/terms/" rel="nofollow ugc">Terms of Service</a></li>
<li><a href="https://ipapi.co/privacy/" rel="nofollow ugc">Privacy Policy</a></li>
</ul>
</li>
</ul>

CountryLock

Block/allow countries with one toggle. Lightweight, no upsells. Includes admin bypass, IP allowlist, and block stats.

R.Sabbir

GeoShield Lite is a geolocation-based product restriction plugin for WooCommerce. It gives store owners control over which products are visible or purchasable based on a visitor’s country.
This is useful for stores that need to comply with international licensing agreements, regional distribution contracts, or country-specific product availability rules.
<h3>How It Works</h3>
GeoShield Lite primarily uses the built-in WooCommerce geolocation system (MaxMind GeoIP database) to detect a visitor’s country. To ensure a seamless “out-of-the-box” experience for stores without a MaxMind configuration, the plugin includes a fail-safe fallback to a legitimate third-party geolocation service. Based on per-product restriction rules you configure, the plugin can either hide products entirely or disable the purchase button for visitors from specified countries.
All restriction logic runs locally using WordPress metadata — external API calls are used strictly as a fallback for country identification when local detection is unavailable.
<h3>Features</h3>
<ul>
<li>Per-Product Restrictions — Define unique country restriction rules directly within the WooCommerce product editor.</li>
<li>Variation-Level Overrides — Apply independent geographic rules to specific product variations.</li>
<li>Blacklist and Whitelist Modes — Block selected countries (blacklist) or allow only selected countries (whitelist).</li>
<li>Two Restriction Actions — Hide the product completely from the catalog, or keep it visible but disable the purchase button.</li>
<li>Custom Restriction Messages — Display a configurable message to visitors who are restricted from purchasing.</li>
<li>Automatic Catalog Filtering — Restricted products are automatically filtered from the shop page, category pages, search results, and related product sections.</li>
<li>WooCommerce Blocks Compatibility — Works with both classic and block-based Cart and Checkout pages.</li>
<li>HPOS Compatible — Fully compatible with WooCommerce High-Performance Order Storage.</li>
</ul>
<h3>Configuration</h3>
After activation, configure restrictions on individual products:
<ol>
<li>Edit any WooCommerce product.</li>
<li>Open the Country Restrictions tab in the Product Data panel.</li>
<li>Enable restrictions and select your target countries.</li>
<li>Choose between Hide Product or Disable Purchase.</li>
<li>Save the product.</li>
</ol>
Global settings are available under the GeoShield > Settings menu.
<h3>External Services</h3>
GeoShield Lite uses external services to detect visitor locations for restriction purposes. Below is complete documentation of all external services used, what data is transmitted, and when.
<h4>IP Address Detection Service (ipify)</h4>
What it does: Detects your server’s public IP address to enable accurate geolocation when your server is behind a proxy, load balancer, or CDN.
When it’s used: Only when the plugin needs to determine the server’s external IP address for geolocation purposes. This typically happens once during initial setup or when geolocation cache expires.
What data is sent: A standard HTTP request to api.ipify.org. No user data, no store data, no personal information is transmitted. Only your server’s IP address is detected (which is already visible to any website you connect to).
Service provider: ipify API 
Website: https://www.ipify.org 
Terms of Service: https://www.ipify.org 
Privacy Policy: https://www.ipify.org (ipify does not log or store IP addresses)
<h4>Geolocation Service (IP-API)</h4>
What it does: Converts IP addresses to geographic locations (country and state/region) to enforce your restriction rules.
When it’s used: As a fallback when WooCommerce’s built-in geolocation is unavailable. Only activates if you haven’t configured MaxMind GeoIP in WooCommerce settings.
What data is sent: The visitor’s IP address is sent to ip-api.com to determine their country and state/region. No other personal information is transmitted.
Service provider: IP-API 
Website: https://ip-api.com 
Terms of Service: https://ip-api.com/docs/legal 
Privacy Policy: https://ip-api.com/docs/legal
Note: You can avoid using this fallback service by configuring MaxMind GeoIP in WooCommerce → Settings → Integration. When MaxMind is configured, GeoShield uses WooCommerce’s native geolocation exclusively.
<h4>Data Privacy & GDPR Compliance</h4>
GeoShield is designed with privacy in mind:
<ul>
<li>Only IP addresses are transmitted to external services (no names, emails, or personal data)</li>
<li>IP addresses are processed solely for geolocation purposes</li>
<li>No data is stored by external services (per their privacy policies)</li>
<li>All external calls use secure HTTPS connections</li>
<li>You can use WooCommerce’s built-in MaxMind integration to eliminate fallback external calls entirely</li>
</ul>
If you have privacy concerns, we recommend configuring MaxMind GeoIP in WooCommerce settings to keep all geolocation processing local to your server.

GeoShield – Country Restrictions Lite for WooCommerce

Country-based product restrictions for WooCommerce. Hide products or disable purchases for visitors from specific geographic regions.

CountryLock vs GeoShield – Country Restrictions Lite for WooCommerce