Bruno Alesiani

<h4>Easy to use WordPress Donation Plugin</h4>
FundCollector is a comprehensive donation management plugin for WordPress that enables organizations to collect donations through multiple payment methods including PayPal and bank transfers.
<h3>Key Features</h3>
<ul>
<li>PayPal Integration: Secure PayPal payments with REST API</li>
<li>Bank Transfer Support: Alternative payment method with automated instructions</li>
<li>Gutenberg Block: Native WordPress block editor integration</li>
<li>Form Builder: Customizable donation forms with multiple fields</li>
<li>Email Notifications: Automated emails to donors and administrators</li>
<li>Security Features: Honeypot protection, reCAPTCHA support, and data encryption</li>
<li>Multi-language: Full translation support for English, Spanish, French, German, Portuguese, and Italian. Additional languages will be added in future versions.</li>
<li>Admin Dashboard: Complete donation management and reporting</li>
<li>Pre-built Pages: Automatic creation of essential pages (Donation, Thank You, Payment Failed, Privacy Policy)</li>
<li>Auto-updates: Configurable automatic plugin updates</li>
</ul>
<h3>Payment Methods</h3>
<ul>
<li>PayPal: Complete PayPal REST API integration with sandbox support</li>
<li>Bank Transfer: Manual payment method with customizable instructions</li>
<li>Future Support: Extensible architecture for additional payment gateways</li>
</ul>
<h3>Security</h3>
<ul>
<li>Data encryption for sensitive information</li>
<li>Honeypot spam protection</li>
<li>reCAPTCHA integration</li>
<li>CSRF protection with nonces</li>
<li>Sanitized input validation</li>
</ul>
<h3>Compliance</h3>
<ul>
<li>GDPR compliant data handling</li>
<li>Privacy-focused design</li>
<li>Data retention controls</li>
<li>Audit trail logging</li>
</ul>
<h3>Privacy Policy</h3>
FundCollector takes privacy seriously:
<ul>
<li>Payment data is processed securely through PayPal’s API</li>
<li>Sensitive data is encrypted at rest</li>
<li>No data is shared with third parties without consent</li>
<li>Users can request data deletion at any time</li>
<li>Full audit trail is maintained for compliance</li>
</ul>
<h3>External Services</h3>
This plugin connects to external third-party services to provide payment processing and security features. Below is a detailed disclosure of each service used:
PayPal Payment Processing
<ul>
<li>What it is: PayPal is a payment processing service used to handle online donations via credit cards, debit cards, and PayPal accounts.</li>
<li>When it’s used: Activated when donors choose PayPal as their payment method. Connections occur during payment creation, authorization, and completion.</li>
<li>Data transmitted: Donor information (name, email), donation amount, currency, and transaction metadata are sent to PayPal’s servers for payment processing.</li>
<li>API endpoints used:
<ul>
<li>Production: <code>https://api-m.paypal.com</code> (live transactions)</li>
<li>Sandbox: <code>https://api-m.sandbox.paypal.com</code> (testing environment)</li>
</ul>
</li>
<li>Privacy Policy: <a href="https://www.paypal.com/privacy" rel="nofollow ugc">PayPal Privacy Statement</a></li>
<li>Terms of Service: <a href="https://www.paypal.com/legal/ua/useragreement-full" rel="nofollow ugc">PayPal User Agreement</a></li>
</ul>
Google reCAPTCHA v3
<ul>
<li>What it is: Google reCAPTCHA v3 is an anti-spam protection service that helps prevent automated bot submissions.</li>
<li>When it’s used: Optional feature (can be disabled). When enabled, reCAPTCHA analyzes user behavior on donation forms to detect potential spam or bot activity.</li>
<li>Data transmitted: User interaction data (mouse movements, typing patterns, IP address) is sent to Google’s servers for spam analysis. The reCAPTCHA token generated is validated server-side.</li>
<li>API endpoints used:
<ul>
<li>Client-side script: <code>https://www.google.com/recaptcha/api.js</code></li>
<li>Server-side verification: <code>https://www.google.com/recaptcha/api/siteverify</code></li>
</ul>
</li>
<li>Privacy Policy: <a href="https://policies.google.com/privacy" rel="nofollow ugc">Google Privacy Policy</a></li>
<li>Terms of Service: <a href="https://policies.google.com/terms" rel="nofollow ugc">Google reCAPTCHA Terms of Service</a></li>
</ul>
User Control
<ul>
<li>PayPal integration is optional and can be disabled in plugin settings (bank transfer only mode)</li>
<li>Google reCAPTCHA is optional and can be disabled in plugin settings</li>
<li>Users are informed about these integrations during plugin configuration</li>
</ul>
Data Protection
<ul>
<li>All communication with external services occurs over encrypted HTTPS connections</li>
<li>API credentials (PayPal Client ID/Secret, reCAPTCHA keys) are stored encrypted in the WordPress database</li>
<li>No donor payment card data is stored on your WordPress server – all sensitive payment information is handled directly by PayPal</li>
<li>reCAPTCHA tokens are temporary and only used for spam verification</li>
</ul>
<h3>Developer Information</h3>
FundCollector is built with security and extensibility in mind:
<ul>
<li>WordPress Coding Standards compliant</li>
<li>Comprehensive error handling</li>
<li>Extensive logging system</li>
<li>Modular architecture</li>
<li>Action and filter hooks for customization</li>
<li>Developer-friendly API</li>
</ul>

FundCollector – Donations Plugin and Fundraising Platform for WordPress

Easily receive donations on your website. Accept payments made with PayPal. For bank transfers, it automatically sends payment instructions via email.

Beplus

<a href="https://giftflow.beplus-agency.cloud/" rel="nofollow ugc">Landing Page</a> | <a href="https://giftflow.beplusthemes.com/" rel="nofollow ugc">Live Demo</a>
GiftFlow is a powerful WordPress plugin designed to help organizations manage donations, donors, and fundraising campaigns efficiently. Built with modern WordPress standards and an extensible architecture, GiftFlow provides everything you need to accept donations, track campaigns, and manage donor relationships.
<h4>Key Features</h4>
<ul>
<li>
Donation Management
<ul>
<li>Custom post types for donations, donors, and campaigns</li>
<li>Comprehensive donor profiles with contact information</li>
<li>Donation history tracking</li>
<li>Transaction details and status management</li>
<li>Support for one-time and recurring donations</li>
</ul>
</li>
<li>
Payment Processing
<ul>
<li>Multiple payment gateway support (Stripe, PayPal)</li>
<li>Secure payment processing with PCI compliance</li>
<li>Direct bank transfer option</li>
<li>Real-time payment status updates</li>
<li>Webhook integration for payment notifications</li>
</ul>
</li>
<li>
Campaign Management
<ul>
<li>Create and manage unlimited donation campaigns</li>
<li>Set campaign goals and track progress in real-time</li>
<li>Campaign-specific donation forms</li>
<li>Campaign analytics and reporting</li>
<li>Visual progress indicators</li>
</ul>
</li>
<li>
Form Builder
<ul>
<li>coming soon </li>
</ul>
</li>
<li>
Reporting & Analytics
<ul>
<li>Admin dashboard with statistics</li>
<li>Export functionality</li>
</ul>
</li>
<li>
Gutenberg Blocks
<ul>
<li>Campaign display blocks</li>
<li>Donation form blocks</li>
<li>Campaign content blocks</li>
<li>Full block editor support</li>
</ul>
</li>
</ul>
<h4>Payment Gateways</h4>
GiftFlow supports multiple payment gateways through official SDKs:
<ul>
<li>Stripe – Direct integration using Stripe PHP SDK for secure credit/debit card processing</li>
<li>PayPal – Direct integration using PayPal JS SDK v6 and REST API v2 with Smart Buttons for seamless payment experience</li>
<li>Direct Bank Transfer – Manual payment option for bank transfers</li>
</ul>
Additional payment gateways can be added through the plugin’s extensible gateway architecture.
<h3>Development</h3>
This plugin uses Laravel Mix (a wrapper around Webpack) to compile and bundle JavaScript and CSS files for production.
<h4>Source Code</h4>
The original source code for all compiled JavaScript and CSS files can be found at: 
<a href="https://github.com/miketropi/giftflow" rel="nofollow ugc">https://github.com/miketropi/giftflow</a>
<h4>File Structure</h4>
In the <code>assets/js/</code> directory, the plugin follows this naming convention:
<ul>
<li><code>*.js</code> – Original, uncompiled source files (human-readable)</li>
<li><code>*.bundle.js</code> – Compiled/minified production files (generated by build process)</li>
</ul>
For example:
<ul>
<li><code>forms.js</code> → Source file</li>
<li><code>forms.bundle.js</code> → Compiled production file</li>
</ul>
The same pattern applies to all JavaScript files:
<ul>
<li><code>common.js</code> / <code>common.bundle.js</code></li>
<li><code>stripe-donation.js</code> / <code>stripe-donation.bundle.js</code></li>
<li><code>paypal-donation.js</code> / <code>paypal-donation.bundle.js</code></li>
<li><code>grecaptcha.js</code> / <code>grecaptcha.bundle.js</code></li>
</ul>
Only the <code>*.bundle.js</code> files are enqueued in production. The source <code>*.js</code> files are included in the repository for transparency and to comply with WordPress.org guidelines requiring human-readable source code.
<h4>Build Commands</h4>
To rebuild assets locally:
<pre><code>npm install - Install dependencies
npm run dev - Watch for changes and rebuild automatically during development
npm run build - Build for production (minified)<h3>External Services</h3>
</code></pre>
This plugin relies on the following third-party services to provide its functionality. These services are only used when explicitly enabled by the site administrator. By using these features, data may be transmitted to external servers. Please review the terms and privacy policies of each service before enabling them.
<h4>Stripe (stripe.com)</h4>
This plugin uses the Stripe payment gateway to process credit and debit card donations securely.
Service Provider: Stripe, Inc. 
Service URL: <a href="https://stripe.com" rel="nofollow ugc">https://stripe.com</a>
Data Transmitted:
<ul>
<li>Payment card information (processed directly by Stripe, not stored on your server)</li>
<li>Donation amount and currency</li>
<li>Donor name and email address</li>
<li>Billing address (if collected)</li>
<li>Transaction metadata (donation ID, campaign ID)</li>
</ul>
When Data is Sent:
<ul>
<li>When a donor submits a donation form using Stripe as the payment method</li>
<li>When processing refunds through the admin dashboard</li>
<li>When verifying webhook signatures for payment status updates</li>
</ul>
Legal:
<ul>
<li>Terms of Service: <a href="https://stripe.com/legal" rel="nofollow ugc">https://stripe.com/legal</a></li>
<li>Privacy Policy: <a href="https://stripe.com/privacy" rel="nofollow ugc">https://stripe.com/privacy</a></li>
</ul>
<h4>PayPal (paypal.com)</h4>
This plugin uses PayPal to process donations through PayPal accounts and PayPal Smart Payment Buttons. The plugin communicates with PayPal’s REST API using the following base URLs:
<ul>
<li>Production: <a href="https://api.paypal.com" rel="nofollow ugc">https://api.paypal.com</a></li>
<li>Sandbox (testing): <a href="https://api.sandbox.paypal.com" rel="nofollow ugc">https://api.sandbox.paypal.com</a></li>
</ul>
Service Provider: PayPal Holdings, Inc. 
Service URL: <a href="https://www.paypal.com" rel="nofollow ugc">https://www.paypal.com</a>
Data Transmitted:
<ul>
<li>Donation amount and currency</li>
<li>Donor name and email address</li>
<li>Order description and transaction metadata</li>
<li>Return URLs for payment completion</li>
</ul>
When Data is Sent:
<ul>
<li>When a donor initiates a donation using PayPal as the payment method</li>
<li>When creating and capturing PayPal orders via the REST API</li>
<li>When processing refunds through the admin dashboard</li>
</ul>
Legal:
<ul>
<li>Terms of Service: <a href="https://www.paypal.com/webapps/mpp/ua/useragreement-full" rel="nofollow ugc">https://www.paypal.com/webapps/mpp/ua/useragreement-full</a></li>
<li>Privacy Policy: <a href="https://www.paypal.com/webapps/mpp/ua/privacy-full" rel="nofollow ugc">https://www.paypal.com/webapps/mpp/ua/privacy-full</a></li>
</ul>
<h4>Google reCAPTCHA (google.com/recaptcha)</h4>
This plugin optionally uses Google reCAPTCHA to protect donation forms from spam submissions and automated abuse.
Service Provider: Google LLC 
Service URL: <a href="https://www.google.com/recaptcha" rel="nofollow ugc">https://www.google.com/recaptcha</a>
Data Transmitted:
<ul>
<li>User’s IP address</li>
<li>Browser user agent and plugins</li>
<li>Mouse movements and keystrokes on the page</li>
<li>JavaScript environment information</li>
<li>reCAPTCHA site key</li>
</ul>
When Data is Sent:
<ul>
<li>When a donation form with reCAPTCHA protection is loaded</li>
<li>When a donor interacts with or submits a protected donation form</li>
</ul>
Legal:
<ul>
<li>Terms of Service: <a href="https://policies.google.com/terms" rel="nofollow ugc">https://policies.google.com/terms</a></li>
<li>Privacy Policy: <a href="https://policies.google.com/privacy" rel="nofollow ugc">https://policies.google.com/privacy</a></li>
</ul>
<h4>Social sharing (Share block)</h4>
The GiftFlow Share block allows visitors to share campaign or page content to social networks. When share buttons are used, the browser may open or redirect to the following third-party URLs. No data is sent from your server to these services; the user’s browser loads the share URL with the page title and URL that the user chooses to share.
Services and URLs used:
<ul>
<li>Facebook – <a href="https://www.facebook.com/sharer/sharer.php" rel="nofollow ugc">https://www.facebook.com/sharer/sharer.php</a> (with <code>u</code> = shared URL)</li>
<li>X (Twitter) – <a href="https://twitter.com/intent/tweet" rel="nofollow ugc">https://twitter.com/intent/tweet</a> (with <code>url</code> and <code>text</code>)</li>
<li>LinkedIn – <a href="https://www.linkedin.com/sharing/share-offsite/" rel="nofollow ugc">https://www.linkedin.com/sharing/share-offsite/</a> (with <code>url</code>)</li>
<li>WhatsApp – <a href="https://api.whatsapp.com/send" rel="nofollow ugc">https://api.whatsapp.com/send</a> (with <code>text</code> containing title and URL)</li>
<li>Pinterest – <a href="https://pinterest.com/pin/create/button/" rel="nofollow ugc">https://pinterest.com/pin/create/button/</a> (with <code>url</code> and <code>description</code>)</li>
<li>Reddit – <a href="https://reddit.com/submit" rel="nofollow ugc">https://reddit.com/submit</a> (with <code>url</code> and <code>title</code>)</li>
<li>Telegram – <a href="https://t.me/share/url" rel="nofollow ugc">https://t.me/share/url</a> (with <code>url</code> and <code>text</code>)</li>
</ul>
Data transmitted: Only the page URL and title (or description) that the user is sharing, passed as query parameters in the share link. No data is sent to these services until the user clicks a share button.
When data is sent: When a visitor clicks a social share button in the Share block.
Legal (WhatsApp):
This plugin includes a sharing feature that allows users to share content via WhatsApp.
When the user clicks the WhatsApp share button, the plugin opens the WhatsApp sharing URL and sends the following data: 
– The page title 
– The page URL
This request is sent only when the user actively clicks the share button.
This service is provided by WhatsApp.
<ul>
<li>Terms of Service: <a href="https://www.whatsapp.com/legal/terms-of-service" rel="nofollow ugc">https://www.whatsapp.com/legal/terms-of-service</a></li>
<li>Privacy Policy: <a href="https://www.whatsapp.com/legal/privacy-policy" rel="nofollow ugc">https://www.whatsapp.com/legal/privacy-policy</a></li>
</ul>
<h4>Google Maps Platform (developers.google.com/maps)</h4>
This plugin optionally uses Google Maps to display campaign locations and geographic information.
Service Provider: Google LLC 
Service URL: <a href="https://developers.google.com/maps" rel="nofollow ugc">https://developers.google.com/maps</a>
Data Transmitted:
<ul>
<li>Map coordinates and location queries</li>
<li>User’s IP address (by Google when loading map tiles)</li>
<li>Google Maps API key</li>
</ul>
When Data is Sent:
<ul>
<li>When a page containing a Google Maps embed is loaded</li>
<li>When geocoding addresses for campaign locations</li>
</ul>
Legal:
<ul>
<li>Terms of Service: <a href="https://cloud.google.com/maps-platform/terms" rel="nofollow ugc">https://cloud.google.com/maps-platform/terms</a></li>
<li>Privacy Policy: <a href="https://policies.google.com/privacy" rel="nofollow ugc">https://policies.google.com/privacy</a></li>
</ul>
<h4>Important Privacy Notice</h4>
Site administrators are responsible for ensuring compliance with applicable privacy laws (such as GDPR) when using these third-party services. We recommend:
<ul>
<li>Disclosing the use of these services in your site’s privacy policy</li>
<li>Obtaining appropriate consent from users before processing their data</li>
<li>Reviewing each service’s data processing agreements</li>
</ul>

GiftFlow – Donation & Fundraising

A comprehensive WordPress plugin for managing donations, donors, and campaigns with modern features and extensible architecture.

FundCollector – Donations Plugin and Fundraising Platform for WordPress vs GiftFlow – Donation & Fundraising