=== Encrypted Tracking for AcyMailing ===
Contributors: radarwave
Tags: acymailing, tracking, privacy, gdpr, newsletter
Requires at least: 6.4
Tested up to: 7.1
Requires PHP: 8.1
Stable tag: 1.0.2
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Encrypted IDs in AcyMailing's open-tracking pixel and tracked links. Statistics keep working.

== Description ==

AcyMailing measures opens and clicks with an invisible image and with links that carry, in plain text, the email ID and the subscriber ID: sequential numbers that anyone who sees the URL can read, and that are easy to forge.

This add-on replaces them, at sending time, with a random AES-256-GCM code (different for every email) and decodes it when the open or click comes in. Opens and clicks keep showing up in AcyMailing reports. Nothing to configure: the key is derived from your WordPress salts.

It was written for the Italian Data Protection Authority guidelines on tracking pixels (17 April 2026), which ask for an unintelligible, non-sequential identifier. It does not replace the privacy notice and consent, which remain the sender's responsibility.

* Forged URLs record nothing; the link still leads to the right page.
* Links in emails sent before activation keep counting.
* If encryption fails, the email is sent anyway.

Requires AcyMailing 10 or later. Tested on WordPress 7.1 with AcyMailing 11.0 and 11.1.

(c) RadarWave di Gianluca Sordiglioni, 2026

== Changelog ==

= 1.0.2 =
* Tested with AcyMailing 11.1.

= 1.0.1 =
* First release on WordPress.org.
