=== EchoFilter — Lead Quality Filter ===
Contributors: eugeniodev
Tags: spam, bot, lead quality, form protection, behavioral biometrics
Requires at least: 5.8
Tested up to: 7.0
Stable tag: 1.0.0
Requires PHP: 7.4
License: GPL-2.0-or-later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Stop fake leads in real time. No CAPTCHAs. Invisible to real users.

== Description ==

EchoFilter protects your WordPress forms from bots and spam using behavioral biometrics — analyzing mouse movement, typing patterns, and timing to distinguish real users from automated submissions.

**How it works:**

1. Install the plugin and enter your EchoFilter API key
2. EchoFilter silently analyzes every visitor's behavior
3. On form submit, it scores the session (0–100 TrustScore)
4. Bots get blocked. Real users get through instantly.

**No CAPTCHAs. No friction. No false positives.**

**Compatible with:**

* Contact Form 7
* WPForms
* Gravity Forms
* Elementor Forms
* Ninja Forms
* Any standard HTML form

**Three protection modes:**

* **Block** — Bot submissions are rejected with an error message (recommended)
* **Flag** — Bot submissions go through but with a hidden `_echofilter_bot=1` field
* **Log** — Monitor mode: all submissions allowed, bots logged in your dashboard

== Installation ==

1. Upload the plugin to `/wp-content/plugins/echofilter/`
2. Activate it in **Plugins → Installed Plugins**
3. Go to **Settings → EchoFilter**
4. Enter your API key from [echofilter.com/dashboard](https://echofilter.com/dashboard)
5. Save — your forms are now protected

== Frequently Asked Questions ==

= Do I need an EchoFilter account? =
Yes. Sign up free at echofilter.com — the Free plan covers up to 1,000 checks/month.

= Will this affect my real users? =
No. EchoFilter runs silently in the background. Real users never see any extra steps.

= Does it work with page builders? =
Yes — it protects any `<form>` element, including those created by Elementor, Divi, or Beaver Builder.

= Is it GDPR compliant? =
Yes. EchoFilter does not store IP addresses (only hashed) and does not use cookies for tracking.

== External Services ==

This plugin connects to **echofilter.com** to analyze form submissions and load the detection SDK. This is the core functionality of the plugin and cannot be disabled while the plugin is active.

**What is sent:**
* Behavioral signals: mouse movement patterns, keystroke timing, form fill duration
* Whether a paste action was detected
* A one-way hash of the visitor's IP address (raw IP is never stored or transmitted)
* User-agent string

**What is NOT sent:**
* Form field values or any user-submitted content
* Names, emails, or any personally identifiable information from your visitors

**When data is sent:**
Data is transmitted only when a visitor submits a form on your site and you have entered a valid API key.

**External service links:**
* Service: [echofilter.com](https://echofilter.com)
* Terms of Service: [echofilter.com/terms](https://echofilter.com/terms)
* Privacy Policy: [echofilter.com/privacy](https://echofilter.com/privacy)

== Changelog ==

= 1.0.0 =
* Initial release