Claimlume Faucet Rewards is a standalone rewards application using WordPress accounts and
administration without WooCommerce. New installations start with public reward,
registration, withdrawal, PTC and leaderboard features disabled.

Included: standalone landing and dashboard pages, account registration and email
verification, exact eight-decimal USD balances, transaction ledger, fixed/random
claims, daily streak bonuses, one-level referrals, timed PTC campaigns, manual
withdrawals, currencies with administrator-entered rates, notifications, badges,
XP, an optional pseudonymous leaderboard, image banner placements, editable public content,
WordPress email transport, CAPTCHA and privacy export/erasure callbacks.

External Services

Cloudflare Turnstile is optional and only contacted when the administrator
selects it. The browser loads its widget; the server sends the CAPTCHA token
and configured secret to Cloudflare for verification. Site hostname is checked.
Documentation: https://developers.cloudflare.com/turnstile/
Terms: https://www.cloudflare.com/website-terms/
Privacy: https://www.cloudflare.com/privacypolicy/

Administrator-configured logos and banners load from their entered image URLs.
The image host receives ordinary browser request data such as IP address and user
agent when the image is displayed. Banner destinations and sponsored visits open
administrator-entered external URLs only on user action. Those destination sites
receive ordinary browser request data and apply their own terms and privacy policy.
The plugin does not make server-side requests to sponsor URLs. Site operators must
use only sponsor programs that expressly permit incentivized or rewarded traffic.
Email uses the website’s existing WordPress mail transport. The plugin developer
does not operate telemetry, licensing, update, advertising or payment servers.

Google reCAPTCHA v2 checkbox is optional. When selected, the browser loads
Google’s widget and the server verifies the response token with the configured
secret. Tokens must pass the server response and hostname checks.
Documentation: https://developers.google.com/recaptcha/docs/verify
Terms: https://policies.google.com/terms
Privacy: https://policies.google.com/privacy

hCaptcha is optional. When selected, the browser loads the hCaptcha widget and
the server sends the token, site key and secret to hCaptcha for verification.
Documentation: https://docs.hcaptcha.com/
Terms: https://www.hcaptcha.com/terms
Privacy: https://www.hcaptcha.com/privacy

FaucetPay and CWallet are optional manual payout destination types. The plugin
does not contact either service. If enabled, a member provides an account email,
username or ID; the site operator then uses that identifier outside WordPress to
send payment manually. Operators should disclose this processing in their privacy
policy and review the services’ current terms and privacy notices.
FaucetPay: https://faucetpay.io/
FaucetPay terms: https://faucetpay.io/legal/terms
FaucetPay privacy: https://faucetpay.io/legal/privacy
CWallet: https://cwallet.com/

Cloudflare, Google, hCaptcha, FaucetPay and CWallet are trademarks of their
respective owners. Claimlume Faucet Rewards is not affiliated with or endorsed by them.

Math verification binds to the member’s login session. For signed-out forms,
an essential HttpOnly browser cookie stores a random identifier for one day.
It does not contain an email, password or wallet address.

Updating from the original submission

Back up the database and plugin files. Deactivate the old Vdot Faucet plugin,
then install and activate Claimlume Faucet Rewards. Do not run both copies.
Do not delete the old copy through WordPress: its uninstaller can remove shared
permissions or data. Keep it deactivated until you have verified this replacement;
you can then remove the old plugin folder using your hosting file manager.
Existing balances, reward history, settings, page IDs, withdrawal records and
[vdot_faucet] shortcodes are reused. [claimlume_faucet] is also supported.
Legacy internal names are retained only for compatibility, not public branding.

Review validation

This revision passed PHP 8.1 and 8.5 syntax checks for all 22 PHP files,
JavaScript syntax checks, and isolated tests covering notice scope, default
branding migration, custom settings preservation, escaping, shortcode aliases
and exact amount calculations. These tests use WordPress function substitutes;
they are not a full WordPress/MySQL installation test or Plugin Check report.
Before public use, verify the member and administrator workflows on a staging
copy with your actual database, mail transport and selected CAPTCHA provider.