GlobePay for WooCommerce

GlobePay for WooCommerce connects a WooCommerce store to GlobePay Hosted Checkout. Customers are redirected to GlobePay to complete payment; the plugin does not collect or store full card numbers, CVV, PINs, or track data.

The plugin currently supports the documented production Common Cashier API flow for JPY. GlobePay’s Common Cashier presents the payment methods enabled for the merchant account in its hosted cashier. The plugin supports Classic Checkout, signed server-to-server payment notifications, payment query/reconciliation services, and WooCommerce full or partial refunds where the merchant account and GlobePay API permissions support them. WooCommerce HPOS compatibility is declared through the WooCommerce compatibility API.

Payment confirmation is based on a verified GlobePay notification or a server-side payment query. A browser return is not treated as payment confirmation.

An active GlobePay merchant account and valid Partner Code/Credential Code are required. Checkout Blocks and a confirmed GlobePay Sandbox endpoint are not claimed by this release.

External services

This plugin connects to GlobePay services operated by Japan GlobePay Co., Ltd. (https://pay.globepay.co.jp) to create hosted checkout sessions, query payment status, and submit/query refunds. Hosted checkout redirects are accepted only for the documented GlobePay API host and the GlobePay-operated cashier host https://jp.globalfreepay.com.

For a payment creation request, the plugin sends the unique WooCommerce payment-attempt identifier, order description, integer JPY amount, the store’s notification URL, the WooCommerce order-received URL, and the configured operator value. Requests also contain the configured Partner Code and a generated request timestamp/nonce/signature as required by the GlobePay API. The store return URL is sent as redirect; the production Common Cashier response returns the hosted cashier URL as pay_url, and the browser redirect adds a fresh signed redirect, time, nonce_str, and sign query set. Payment query and refund requests send the payment-attempt identifier and, for refunds, the refund identifier and integer API refund amount.

GlobePay sends signed payment notifications to the configured WordPress REST callback URL. The plugin validates these callback fields: time, nonce_str, sign, partner_order_id, order_id, total_fee, real_fee, and currency. Notifications must be within the documented five-minute time window, are protected against cross-order replay, and are confirmed with a server-side Payment Query before the WooCommerce order is completed.

The data is sent to create and process payments, query transaction status, and process refunds. Refunds should be initiated from the WooCommerce order; refunds made directly in the GlobePay merchant console are not automatically imported into WooCommerce because the documented notification API covers payment-success notifications only. GlobePay’s Privacy Policy is available at https://file.globepay.co.jp/open/globepay_privacy_use_policy.html. GlobePay’s Terms and Conditions are available at https://www.globepay.co.jp/?regulations/.

Privacy

The plugin stores WooCommerce order-related GlobePay metadata locally, including the Partner Order ID, integer amount, currency, GlobePay transaction ID, and webhook idempotency key. Merchant credentials are stored in WooCommerce payment settings, are never rendered with their saved value in the admin HTML, and are not rendered in customer-facing pages.

Payment processing sends the order and transaction data described in the External services section to GlobePay. The plugin does not include telemetry, advertising tracking, remote executable-code loading, or a card-input form.