Oli Abandoned Cart Recovery
Oli Abandoned Cart Recovery asks for the customer’s consent on the checkout page and, once the consent box is ticked, saves the email and the cart — even for guests who never place an order — and sends a sequence of reminder emails when the cart is abandoned. Consent is on by default for guests and
Oli Abandoned Cart Recovery asks for the customer’s consent on the checkout page and, once the consent box is ticked, saves the email and the cart — even for guests who never place an order — and sends a sequence of reminder emails when the cart is abandoned. Consent is on by default for guests and logged-in customers (Quebec Law 25, GDPR). Every email has a secure recovery link that refills the cart, pre-fills the email and sends the customer straight to checkout. Reminders stop automatically as soon as an order is placed.
It works with the classic checkout and the block checkout , is compatible with HPOS (High-Performance Order Storage), and does all the heavy work in the background with Action Scheduler (WP-Cron fallback). Nothing runs on the front end except one tiny script on the checkout page.
Capture
- Email captured on the fly, with consent — once the consent box is ticked, the email is sent on blur/change with a debounce, a nonce and server-side is_email validation
- Classic and block checkout — one delegated listener works with both, through the lightweight wc-ajax endpoint
- Phone, first and last name captured with the email
- Guests and registered customers — logged-in carts are updated every time the cart changes, once the customer has consented
- Consent first (default) — with the Require consent switch on (default), nothing is saved for guests or logged-in customers (no email, phone or cart) until they tick the consent checkbox under the email field (classic and block checkout). A logged-in customer’s consent is remembered in their account and can be withdrawn by unticking the box. The switch can be turned off by the site owner, under their own responsibility: a permanent warning (Law 25, GDPR) is then shown in the admin
- Consent text with links — edited per language with a small editor (links, bold, italic, saved with wp_kses ), for example to link your privacy policy. Left empty, the default text is translated in each visitor’s language
- Abuse protection — rate limits on the capture endpoint (per IP and per session, oli_acr_capture_rate_limits filter) and a honeypot field
- Cache-proof — checkout pages send no-cache headers and DONOTCACHEPAGE ; an expired nonce from a cached page is refreshed automatically
