Subscribe Form for Listmonk

Description

Subscribe Form for Listmonk connects WordPress to a self-hosted Listmonk instance. Enter the address of your Listmonk installation, and the plugin loads its public lists. Place the “Newsletter signup (Listmonk)” block on any page, choose a list and optionally override heading and description.

No API credentials are required: the plugin only uses Listmonk’s public endpoints.

Privacy by design

• Consent checkbox that is never preselected, names the newsletter, links to your privacy policy and mentions the right to withdraw.
• Double opt-in is handled by Listmonk. The plugin never creates preconfirmed subscriptions.
• Only the email address and the selected list are sent to Listmonk. WordPress does not store any addresses.
• Rate limiting uses HMAC values only – no plain addresses or IP addresses are stored.
• No external fonts, CAPTCHA services, tracking or telemetry. All assets are served locally.
• Without a privacy policy page, no form is shown.
• Adds a suggested text to the WordPress privacy policy guide.

Safe operation

• A list only accepts subscriptions after you enabled subscriptions globally and confirmed that the list uses double opt-in in Listmonk. Listmonk does not publish the opt-in type, so this is a deliberate manual check.
• Lists that are removed from Listmonk or made private disappear from the website automatically.
• Each page only accepts lists that are actually offered by a block on that page.
• Local and development environments never send subscriptions (see the sffl_suppress_delivery filter).
• Repeated submissions within five minutes are answered like the first one, without triggering a second confirmation email.
• Clear success message, protection against double submission and full keyboard and screen reader support.

External services

This plugin connects to a Listmonk server whose address you enter in the plugin settings. Listmonk is self-hosted software; the server is operated by you or on your behalf, not by the plugin author.

• Loading lists: When you save the settings, click “Reload lists” or open the block editor (at most every 12 hours), the plugin requests /api/public/lists from your Listmonk server. No personal data is sent.
• Subscriptions: When a visitor submits a form, the plugin sends the email address and the UUID of the selected list to /api/public/subscription on your Listmonk server. Listmonk then sends the confirmation email.

Visitors’ browsers never connect to Listmonk directly through this plugin. The terms and privacy policy that apply are those of the operator of the Listmonk server. Listmonk project: https://listmonk.app/ – source code and license: https://github.com/knadh/listmonk