TitanCart Lite Wordpress Plugin - Rating, Reviews, Demo & Download
Plugin Description
TitanCart is a complete storefront in one plugin: catalog, cart, checkout, orders, customers, shipping, tax and reporting. It runs on its own database tables and its own REST API rather than bending WordPress posts and meta into a shopping cart, which is why it stays fast as a catalog grows.
No license key is required. TitanCart Lite is free and GPL, and it never contacts a remote server.
What you get
- Products — simple and variable products, categories, product filters, attributes, image galleries, digital downloads.
- Cart and checkout — a real cart session, guest checkout, coupon codes, order notes.
- Payments — Stripe, plus cash on delivery, bank transfer and cheque.
- Shipping — flat rate, free shipping, and table-based rates with zones and conditions.
- Tax — full tax classes, zones and rate rules. Not a stripped-down version; tax is a legal requirement, not an upsell.
- Orders — order management, statuses, invoices, fulfilment and shipment tracking.
- Customers — accounts, address book, order history, customer groups.
- Reviews — product reviews with moderation.
- Wishlists, sitemap, SEO output (meta tags, canonical URLs, Open Graph, JSON-LD product schema), GDPR tools and age verification.
- Import and export — CSV import and export, including a WooCommerce migration tool.
- Prism — a free companion storefront theme built for TitanCart, available as a free download from the TitanCart marketplace at market.titancart.io.
Built to be portable
TitanCart’s cart, checkout, order and pricing logic have no WordPress function calls inside them. WordPress is a thin hosting layer over a self-contained engine. That is an architectural choice, not marketing: it is what keeps the query count low and the upgrade path open.
Privacy and external services
TitanCart Lite makes no outbound connections of any kind on its own. It contains no license check, no update checker, no analytics, no telemetry, and no remote code installer. Updates arrive through WordPress.org like any other plugin.
A small number of features contact a third party only after you configure them, using credentials you supply. Each is documented in the External services section below. None is enabled by default.
Source code
The admin interface, admin/build/titancart-admin.js, is hand-written JavaScript and is itself the source code: there is no build step, no transpiler, no JSX, no bundler and no minification anywhere in this plugin. The directory name is historical. The same is true of every other JavaScript and CSS file shipped — what you read in the ZIP is exactly what the developer wrote and maintains.
External services
TitanCart Lite connects to the following external services. Every connection is off by default and happens only after the site owner configures the feature with their own credentials.
Stripe (payment processing)
- What it is: card payment processing by Stripe, Inc.
- What it is used for: charging customers at checkout when the store owner has created a Stripe payment method with their own API keys.
- What data is sent, and when: when a Stripe method is enabled, the checkout page loads Stripe’s
Stripe.jsfromjs.stripe.com(a Stripe requirement for PCI compliance) and card details entered by the customer go directly from the customer’s browser to Stripe — they never touch the store’s server. The server then exchanges payment intents/confirmations with Stripe’s API (order amount, currency, and the payment reference). - Terms and privacy: Stripe Services Agreement, Stripe Privacy Policy.
Google reCAPTCHA (spam and abuse protection)
- What it is: Google’s reCAPTCHA v2/v3 service.
- What it is used for: protecting the login, registration, checkout, review and contact surfaces from bots — only if the store owner enables the reCAPTCHA feature and supplies their own site key and secret.
- What data is sent, and when: on pages with a protected form, Google’s
api.jsloads fromwww.google.comin the visitor’s browser (Google’s script collects the signals it uses for its bot score — see its privacy policy); on submit, the server sends the response token, the site secret and the visitor’s IP address to Google’ssiteverifyendpoint to obtain the verdict. - Terms and privacy: Google Terms of Service, Google Privacy Policy.
Google Maps Places (address autocomplete)
- What it is: the Google Maps JavaScript API with the Places library.
- What it is used for: suggesting street addresses as a customer types on the checkout and account address forms — only if the store owner turns on Address autocomplete in checkout settings and supplies their own Google Maps API key. Off by default; nothing loads without the key.
- What data is sent, and when: on the checkout and account pages only, the visitor’s browser loads
maps.googleapis.com/maps/api/js(keyed with the owner’s API key) and sends the characters typed into the address field to Google to receive suggestions. The store’s server never contacts Google for this feature. - Terms and privacy: Google Maps Platform Terms, Google Privacy Policy.
YouTube and Vimeo (product video embeds)
- What it is: the public video players of YouTube (Google) and Vimeo.
- What it is used for: showing a product video on the product page when the store owner has pasted a YouTube or Vimeo link into that product’s video field. No video is embedded unless the owner adds one.
- What data is sent, and when: the product page renders a thumbnail from
img.youtube.comand, when the visitor clicks play, an embedded player fromwww.youtube.comorplayer.vimeo.comin the visitor’s browser; those providers receive the visitor’s request as with any embedded video. In the admin product editor, a thumbnail preview is fetched fromimg.youtube.comfor the link the owner entered. Videos hosted on the store’s own server are played directly and involve no third party. - Terms and privacy: YouTube Terms of Service, Google Privacy Policy, Vimeo Terms of Service, Vimeo Privacy Policy.
Remote images during CSV import
- What it is: standard HTTP downloads performed by WordPress itself.
- What it is used for: when the store owner runs a product CSV import whose rows contain image URLs, WordPress downloads those images into the media library.
- What data is sent, and when: an HTTP GET to each image URL the owner provided in their own file, at import time only.
The product page’s optional share buttons are ordinary links to Facebook, X, Pinterest and LinkedIn share pages; nothing is loaded from those sites and no request is made unless the visitor clicks one.
No other external connections exist in TitanCart Lite. Payment gateways beyond Stripe (PayPal, Square, Authorize.net), live carrier shipping rates (USPS, FedEx), social sign-in (Google, Facebook, Apple) and the TitanCart extensions catalog are features of TitanCart Pro, are not present in this plugin’s code, and are documented in the Pro edition’s own materials.
Screenshots
No screenshots provided

