=== Greyfu Login Captcha ===
Contributors: greyfu
Tags: captcha, login, security, authentication, brute-force protection
Requires at least: 5.5
Tested up to: 6.9
Requires PHP: 7.4
Stable tag: 1.0.0
License: GPL-2.0-or-later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

A lightweight captcha that protects your WordPress login page from automated bot attacks using a simple math challenge.


== Description ==

Greyfu Login Captcha adds a secure verification step to your WordPress login form, helping block automated login attempts and brute-force attacks.

**Lite Version (Free):**
* Simple math-based captcha
* Multisite compatible
* Lightweight and fast
* No personal data stored or transmitted
* Works without any external service

**Pro-Ready Features (Optional Upgrade):**
* Infrastructure prepared for reCAPTCHA v2 integration
* Infrastructure prepared for hCaptcha integration
* API key fields included

The free version is fully functional on its own and does not require any external captcha service.

== Installation ==

1. Upload the plugin folder to `/wp-content/plugins/`.
2. Activate the plugin through the **Plugins** menu.
3. Configure settings under **Settings → Greyfu Login Captcha**.

== Screenshots ==

1. Math captcha displayed on the WordPress login page.
2. Example reCAPTCHA login interface (Pro extension).
3. Settings page showing configuration options.

== Changelog ==

= 1.0.0 =
* Initial release with math captcha support and Pro-ready structure.

== Third Party Services ==

This plugin optionally connects to external captcha services when the Pro features are enabled:

**Google reCAPTCHA (Optional)**
When reCAPTCHA is enabled in Pro settings, the plugin sends verification requests to Google's reCAPTCHA service.
- Service: https://www.google.com/recaptcha/
- Privacy Policy: https://policies.google.com/privacy
- Terms of Service: https://policies.google.com/terms
- Data sent: User's IP address and reCAPTCHA response token
- When: Only during login form submission when reCAPTCHA is enabled

**hCaptcha (Optional)**
When hCaptcha is enabled in Pro settings, the plugin sends verification requests to hCaptcha service.
- Service: https://www.hcaptcha.com/
- Privacy Policy: https://www.hcaptcha.com/privacy
- Terms of Service: https://www.hcaptcha.com/terms
- Data sent: User's IP address and hCaptcha response token
- When: Only during login form submission when hCaptcha is enabled

The free/lite version uses a built-in math captcha that does not connect to any external service.

== Frequently Asked Questions ==

= Does the free version work without external APIs? =
Yes. The built-in math captcha requires no API keys and works out of the box.

= Does the plugin store personal data? =
No. No personal or sensitive information is tracked, logged, or sent to remote servers.

= Is multisite supported? =
Yes, this plugin works on WordPress Multisite installations.

== Support / Contact ==

For issues or questions, please contact us:
**Email:** hello@greyfu.com  
**Website:** https://greyfu.com