No Cookie Analytics – By Arfa

1.0.7

• Removed UTF-8 byte order marks (BOM) from PHP sources so activation no longer sends accidental
  output to the browser.
• Uninstall: reliable table drop, clear all related and legacy cron hooks, and remove cached
  geo lookup transients.
• Deactivation: clear legacy cleanup cron hook names in addition to the canonical event.

1.0.6

• Renamed plugin to “No Cookie Analytics – By Arfa”; text domain and translation template are
  no-cookie-analytics-by-arfa (Domain Path: /languages).
• Main bootstrap file is no-cookie-analytics-by-arfa.php; directory slug no-cookie-analytics-by-arfa.
• PHP class and constant prefix NCABA_* (e.g. NCABA_VERSION, NCABA_Activator); runtime
  identifiers use lowercase ncaba_* / ncaba- (database table {prefix}ncaba_hits, options,
  hooks, AJAX, and asset handles). Legacy cfaba_*, cfba_*, and mistaken NCABA_* option keys
  or table names migrate automatically on upgrade.
• Plugin URI points to a reliable HTTPS profile page; localized admin strings and dashboard JS
  escaping improvements.
• Bumped tested-up-to header for current WordPress.

1.0.5

• Previous branding and slug iteration; see older releases for detail.

1.0.4

• Raised minimum WordPress version to 6.2 for safe %i identifier placeholders in
  $wpdb->prepare().
• Hardened admin and cron SQL (prepared statements, esc_like() for LIKE patterns).
• Replaced parse_url() with wp_parse_url(); removed redundant fclose() on export stream.
• Settings import notices use per-user transients; validated upload temp files with
  is_uploaded_file().
• Added readme short description; direct-access guard on settings view template.

1.0.3

• Bundled Chart.js and Poppins assets locally (removed CDN dependency).
• Added explicit admin consent toggle for external geolocation lookup.
• Updated privacy disclosure and reviewer-oriented readme details.

1.0.2

• Improved admin UI and tooltip behavior.

1.0.1

• Added richer visitor identity and dashboard/report improvements.

1.0.0

• Initial release.