Title: Maildroppa
Author: maildroppa
Published: <strong>29 de setembre de 2026</strong>
Last modified: 24 d'octubre de 2026

---

Cerca extensions

![](https://ps.w.org/maildroppa/assets/banner-772x250.png?rev=3718306)

![](https://ps.w.org/maildroppa/assets/icon-256x256.png?rev=3718306)

# Maildroppa

 Per [maildroppa](https://profiles.wordpress.org/maildroppa/)

[Baixa](https://downloads.wordpress.org/plugin/maildroppa.1.4.0.zip)

 * [Detalls](https://ca.wordpress.org/plugins/maildroppa/#description)
 * [Ressenyes](https://ca.wordpress.org/plugins/maildroppa/#reviews)
 *  [Instal·lació](https://ca.wordpress.org/plugins/maildroppa/#installation)
 * [Desenvolupament](https://ca.wordpress.org/plugins/maildroppa/#developers)

 [Suport](https://wordpress.org/support/plugin/maildroppa/)

## Descripció

Maildroppa connects WordPress and WooCommerce to your Maildroppa account. Add signup
forms, manage subscribers, turn blog posts into RSS newsletters, and connect your
shop for optional checkout newsletter signup, cart recovery, and back-in-stock alerts.

The plugin is free. A Maildroppa account is required; free and paid plans are available.
See [Maildroppa pricing](https://maildroppa.com/pricing).

#### Features

 * Place active inline Maildroppa forms with a shortcode, Gutenberg block, or classic
   widget.
 * Build theme-styled signup forms (native WordPress HTML) from an active inline
   Maildroppa form and style them with your WordPress theme.
 * Place active popup and slider forms on all or selected pages/posts, or exclude
   selected pages/posts.
 * Open published page forms through their Maildroppa landing-page link.
 * Manage subscribers, fields, tags, and segments from WordPress.
 * Preview RSS or Atom feeds and create, edit, activate, pause, resume, test, check,
   and archive RSS newsletters inside WordPress.
 * Review feed-check history and release or cancel generated RSS newsletter issues
   without leaving WordPress.
 * Configure scheduled, instant, or item-threshold delivery, segments, sender profiles
   that can currently send, email copy, and review or automatic release.
 * Pair WooCommerce and offer optional newsletter signup in classic or block checkout,
   with HPOS support and central double opt-in.
 * Offer an optional, unchecked newsletter signup in Contact Form 7 and WPForms,
   with explicit field and topic selection and central double opt-in.
 * Optionally deliver selected WordPress user events to Maildroppa automations through
   a persistent queue with limited retries and age-based expiry.
 * Optionally expose signed Maildroppa subscriber events as replay-protected WordPress
   actions.

#### WooCommerce

Use the direct WooCommerce connection in Maildroppa to sync orders, order history,
and product data. Order and product sync does not require this WordPress plugin.
Install and pair the plugin to add these shop features:

 * Offer an optional, initially unchecked newsletter signup in classic or block 
   checkout, using your configured consent text, subscription topics, and Maildroppa
   double opt-in flow.
 * Send checkout updates to Maildroppa for cart-reminder automations that you deliberately
   configure and activate. Connecting the shop does not automatically enable reminder
   emails.
 * Let customers return through a personal recovery link and confirm restoring available
   cart items at current prices. Payment, login, and billing details are not restored.
 * Display back-in-stock request forms for unavailable simple products and selected
   variations. Product alerts require their own email confirmation and do not subscribe
   customers to newsletters.

Supports classic and block checkout, High-Performance Order Storage (HPOS), and 
the classic WooCommerce order store. WooCommerce is optional; the other WordPress
features work without it. Background delivery requires WordPress cron or a working
hosting cron setup.

### External services

This plugin requires [Maildroppa](https://maildroppa.com), a third-party email marketing
service operated by Maildroppa. The following connections occur only for the described
features.

#### Maildroppa API

 * When an administrator tests the connection or manages Maildroppa data in WordPress,
   the WordPress server sends the configured API key to `https://api.maildroppa.
   com`. Depending on the selected action, the request also contains resource IDs
   and subscriber email addresses, names, statuses, custom field values, tag assignments,
   field/tag/segment definitions, segment expressions, search/filter criteria, or
   pagination parameters. Maildroppa uses this data to authenticate the account 
   and perform the requested email-marketing action.
 * Opening Maildroppa > Subscribers requests account-wide daily subscriber counts
   for the last 30 calendar days from the Maildroppa API. The request contains the
   API key, date range and report interval. Successful reports are cached locally
   for five minutes, separately for each account and API connection. The chart shows
   confirmed subscriber totals, not signups attributed to this website.
 * Opening any connected Maildroppa admin page, or connecting or replacing an API
   key, requests `https://api.maildroppa.com/account`. Maildroppa returns the stable
   account ID, account name and owner email shown in the admin header. WordPress
   stores a hash of that ID and the API origin to bind its cached forms and queued
   events to the account. Rotating a key within the same account preserves this 
   binding. Switching to a different account is blocked while local forms, event
   settings, queued deliveries, or account webhooks still belong to the previous
   account.
 * Opening the forms report requests `/report/form` with the selected date range
   and form IDs to show signup counts by form. The subscriber report uses `/report/
   subscriber-status-total`. Manually requesting double opt-in sends the entered
   subscriber data, the consent text and a consent source containing the WordPress
   administrator ID and UTC timestamp; Maildroppa may send a confirmation email.
 * Each request from the WordPress server identifies the plugin and its version,
   the WordPress version, and the site’s home URL in its HTTP `User-Agent` header.
   This also applies to requests made by scheduled background tasks.
 * When hosted forms are placed on the site or managed in the admin screens, the
   WordPress server reads the form definitions, names, types, statuses, placement
   options, and published page URLs from the Maildroppa API and stores this metadata
   in the local WordPress options table. It refreshes the cache in a scheduled background
   request when it becomes stale; a public page view of a page with a placed hosted
   form can schedule that refresh. The cache normally expires after five minutes,
   may be used for up to seven days during an API failure, and failed refreshes 
   are retried after a five-minute backoff. The cached data is used to populate 
   form-placement controls and to validate configured placements; it does not contain
   subscriber records.
 * When an administrator opens or manages RSS newsletters, the WordPress server 
   requests newsletter data, the available subscription topics, and sender-profile
   delivery status from `https://api.maildroppa.com`. Feed previews send the entered
   public feed URL. Creating or editing a newsletter sends its name, source/site/
   feed URLs and feed title, delivery schedule or threshold, selected segment, sender-
   profile and subscription-topic IDs, subject, email content, item limit, and approval
   policy. Status, feed-check, issue-history, release, cancellation, test-email,
   and archive actions send the selected newsletter and, where applicable, issue
   ID. Maildroppa uses this data to create and operate the requested RSS newsletter.
   Maildroppa servers fetch the configured public RSS feeds themselves.
 * When an administrator deliberately sends a support request, the WordPress server
   sends the entered administrator name, email address, and message to `https://
   api.maildroppa.com/contact` so Maildroppa can answer it. The «Include technical
   details» checkbox is selected by default and can be cleared before sending. When
   selected, the message also includes the plugin, WordPress and PHP versions, whether
   automatic WordPress cron is enabled, the last observed Maildroppa cron run, and
   API-key validation status. The administrator can inspect these details in the
   form. The automatically attached details contain no API key or subscriber data;
   the support request does not send the API key for authentication.
 * When WordPress user events are explicitly enabled, the WordPress server stores
   each selected event in a local queue and sends the event name, user email address,
   occurrence time, idempotency key, and only the profile properties selected by
   an administrator to `https://api.maildroppa.com/events`. Delivery runs in scheduled
   background requests, retries temporary failures a bounded number of times, and
   does not create a Maildroppa contact. Pending events expire 30 days after creation
   and will no longer be sent. Expired and permanently failed records, including
   the email address and selected properties, remain available for diagnosis for
   30 days after failure; WordPress’s personal-data export and erasure tools include
   these records. Cleanup runs daily through WP-Cron while the plugin is active.
   Missed or disabled cron runs delay physical deletion; site operators must arrange
   regular WP-Cron execution. If an event cannot be queued, WordPress stores a diagnostic
   marker with event name, user ID, failure time, count and error message for at
   most 30 days, subject to daily WP-Cron cleanup. The queue has no fixed record-
   count limit. Maildroppa rejects events for people who are not Maildroppa subscribers
   and events without a matching automation; these are kept as failed records under
   the same retention.
 * When Maildroppa events in WordPress are explicitly enabled, the WordPress server
   sends the public WordPress receiver URL and selected event name to `https://api.
   maildroppa.com/webhook-subscriptions`. When the selected event occurs, Maildroppa
   sends a signed HTTPS request to that public receiver. The request contains the
   event ID and type, subscriber email and profile fields, tags, and event-specific
   form, confirmation, or tag details, together with timestamp, signature, event-
   ID, and delivery-ID headers. The plugin verifies the signature and acknowledges
   completed replays without running the event again during the 90-day retention
   period. Completed event IDs become eligible for deletion after 90 days for replay
   protection. Daily WP-Cron cleanup and incoming webhook requests remove expired
   records; missed cron runs can delay deletion. Disabling an event asks Maildroppa
   to stop sending it.
 * The API base URL can be changed by the site owner using the documented `MAILDROPPA_API_BASE_URL`
   constant or environment variable, or the `maildroppa_api_base_url` WordPress 
   filter. If changed, API requests, including authenticated requests with the API
   key and the contact-form signup requests described below, go to the configured
   URL instead of `https://api.maildroppa.com`.

#### Optional Contact Form 7 newsletter signups

 * This integration requires Contact Form 7 and a connected Maildroppa service that
   supports WordPress signup requests. An administrator must enable it for each 
   contact form, map the permitted input fields, select subscription topics, and
   provide the consent text. Opening its configuration requests available fields
   and topics from the Maildroppa API. Opening or saving enabled settings also sends
   an authenticated GET request to `https://api.maildroppa.com/subscribers/wordpress-
   signup-requests` to check whether the connected service supports this feature.
   The mapping, topic IDs and labels, consent text, and account/site binding are
   stored with the contact form in WordPress.
 * A visitor must select the optional, initially unchecked newsletter checkbox. 
   Only after Contact Form 7 successfully sends the contact email does the plugin
   queue the newsletter signup. Demo mode and skipped email delivery are not supported.
   The plugin queues the mapped email address and other mapped field values, selected
   topic IDs, displayed consent text including topic labels, consent source containing
   the site URL and contact-form ID, submission time, and a random request ID. Unmapped
   fields, multi-line message fields and attachments are not forwarded by this integration.
 * Scheduled delivery sends the signup, submission time and request ID from the 
   WordPress server to `https://api.maildroppa.com/subscribers/wordpress-signup-
   requests/{requestId}`, authenticated with the API key. Maildroppa uses this data
   to process the signup through the account’s default signup flow and determine
   whether to send a double-opt-in confirmation email. Queuing a signup does not
   itself confirm a subscription. The visitor browser sends the contact form to 
   WordPress; it does not send this signup directly to the Maildroppa API or load
   the hosted Maildroppa form runtime for this checkbox.
 * Temporary delivery failures are retried with increasing delays, up to eight attempts
   for retryable failures. Pending contact-form signups expire after 24 hours. This
   signup queue accepts up to 5,000 retained signup records and a maximum queued
   payload of 64 KiB. Accepted requests are removed locally. When a signup expires
   or permanently fails, its queued signup payload is cleared; the email address,
   request identifier, timestamps, status and error details remain for diagnosis
   until eligible for deletion 30 days after failure. Administrators can delete 
   failed records immediately, but cannot manually retry them; a new signup requires
   new consent. WordPress personal-data export and erasure include pending and failed
   queue records. Cleanup requires WP-Cron while the plugin is active; missed runs
   delay cleanup. Changing the account, site URL or matching integration configuration,
   or disabling that integration, prevents pending signups from being sent under
   the old configuration.

WPForms uses the same signup API and delivery queue as Contact Form 7. Only successful
submissions with newsletter consent are forwarded. See the WPForms FAQ below for
setup, transmitted data, retention and website attribution.

#### Hosted and native Maildroppa forms

 * On public pages where an administrator has placed a hosted form, the visitor 
   browser loads executable JavaScript from `https://form.maildroppa.com/md-form-
   loader.js` and form styles from `https://form.maildroppa.com`. The browser requests
   these resources when it renders the page containing the form. The script then
   requests the selected form definition from `https://api.maildroppa.com/form/{
   formId}` using the form ID and a SHA-256 fingerprint (requires Web Crypto, normally
   available over HTTPS) derived from screen size, browser name and major version,
   and operating-system name and version. This loads and renders the selected hosted
   form and counts unique form views. The loader stores `lastSeen{formId}` in localStorage,
   loads images from `https://static.maildroppa.com`, and may load videos from YouTube,
   Vimeo or another URL configured in the form. Those providers receive the IP address
   and browser request headers when their resources load.
 * A native WordPress form uses HTML and styles delivered by this plugin. When a
   visitor opens a page containing the form, the visitor browser requests the current
   form definition, visitor-specific agreement, and legal links from `https://api.
   maildroppa.com/form/{formId}` using the same fingerprint. Native forms use a 
   shorter non-cryptographic fingerprint if Web Crypto is unavailable or fails. 
   This keeps required fields and consent aligned with Maildroppa and counts unique
   form views while the WordPress theme controls presentation.
 * Loading either form type already sends the form ID and fingerprint to Maildroppa,
   before submission. Maildroppa stores the IP address, form ID and fingerprint 
   for daily unique-view counting; daily records become eligible for deletion on
   the following day.
 * When a visitor submits a hosted or native form, the browser sends the form ID,
   email address and other configured field values, the displayed subscription-topic
   IDs and labels, the IDs of topics the visitor selected, the agreement ID when
   consent is required, and the same fingerprint directly to `https://api.maildroppa.
   com/subscribe`. Normal HTTPS request data, including the visitor IP address, 
   user agent, and any referrer information the browser permits, also reaches Maildroppa.
   Maildroppa uses this data to process the requested newsletter signup, topic choices,
   and related consent workflow.
 * Sites with a Content Security Policy must allow scripts and styles from `https://
   form.maildroppa.com` and connections to `https://api.maildroppa.com` for these
   forms, plus images from `https://static.maildroppa.com` and any configured video
   providers.
 * The public form loader URL can be changed by the site owner using the documented`
   MAILDROPPA_PUBLIC_FORM_BASE_URL` constant or environment variable, or the `maildroppa_public_form_base_url`
   WordPress filter. The `maildroppa_public_form_loader_url` filter can override
   the hosted loader script URL independently. If changed, hosted form scripts and
   styles load from the configured URL. Native form definitions and submissions 
   use the API base URL. The hosted loader uses its own configured API origin.

#### Form and RSS previews

 * Opening a hosted-form preview in WordPress, including a preview embedded in the
   block editor, loads executable JavaScript from `https://form.maildroppa.com/md-
   form-preview.js` and styles from `https://form.maildroppa.com/index.css` into
   the administrator’s browser. This also happens when the form has not been placed
   on a public page. The preview requires administrator access and a valid WordPress
   nonce. WordPress requests the selected form’s preview data from the Maildroppa
   API using the API key and form ID, and supplies that data to the preview renderer.
   Native-form previews use the plugin’s local renderer and WordPress REST endpoints.
   Preview submissions are intercepted locally and do not send newsletter signups
   or confirmation emails. Resource requests still send normal browser request data,
   including IP address and user agent, to the resource host. A configured public
   form base URL also changes the hosted preview script and style origin.
 * Opening an RSS issue’s email preview first requests its content through the Maildroppa
   API …

## Captures

[⌊Manage subscribers, filter by status and tags, and follow subscriber growth. All
names, email addresses and figures shown are fictional examples.⌉⌊Manage subscribers,
filter by status and tags, and follow subscriber growth. All names, email addresses
and figures shown are fictional examples.⌉[

Manage subscribers, filter by status and tags, and follow subscriber growth. All
names, email addresses and figures shown are fictional examples.

[⌊Build a theme-styled signup form with your own headline, labels, fields and button
text.⌉⌊Build a theme-styled signup form with your own headline, labels, fields and
button text.⌉[

Build a theme-styled signup form with your own headline, labels, fields and button
text.

[⌊Turn blog posts into RSS newsletters, review upcoming issues and see previously
released editions.⌉⌊Turn blog posts into RSS newsletters, review upcoming issues
and see previously released editions.⌉[

Turn blog posts into RSS newsletters, review upcoming issues and see previously 
released editions.

[⌊Add signup forms to your website with a block, shortcode or widget, and manage
popup and landing-page forms.⌉⌊Add signup forms to your website with a block, shortcode
or widget, and manage popup and landing-page forms.⌉[

Add signup forms to your website with a block, shortcode or widget, and manage popup
and landing-page forms.

## Blocs

Aquesta extensió proporciona 2 blocs.

 *     Maildroppa Form Show an inline signup form, as designed in Maildroppa.
 *     Maildroppa Theme-Styled Form Show a theme-styled signup form. It uses your
   site’s fonts and colors.

## Instal·lació

 1. Upload the `maildroppa` plugin folder to `/wp-content/plugins/`, or install the
    generated ZIP in WordPress Admin.
 2. Activate **Maildroppa**. The PHP OpenSSL extension is required to protect API keys
    and webhook signing secrets.
 3. Open **Maildroppa > Get started**.
 4. Paste your Maildroppa API key and click **Connect**. The key is checked before 
    it is saved.
 5. Open **Maildroppa > Signup Forms** and use the placement offered for each active
    Maildroppa form.
 6. Open **Maildroppa > RSS Newsletters** to create and manage a newsletter from the
    WordPress feed or another RSS/Atom feed.

#### Connect WooCommerce

 1. In the Maildroppa app, open **Settings > Shop connections**, add a **WooCommerce**
    shop, and enter its public HTTPS address.
 2. Follow the authorization link to your shop, approve the requested access, and return
    to Maildroppa. Check that the shop is connected. This sets up the direct order 
    and product connection.
 3. Install and activate this plugin, then connect it under **Maildroppa > Get started**
    using an API key from the same Maildroppa account.
 4. Open the shop details in Maildroppa and generate a plugin pairing code. In WordPress,
    open **Maildroppa > Settings > WooCommerce**, enter the code, and confirm pairing.
    Check the connected status on both sides.
 5. Configure optional checkout newsletter signup in the plugin. Configure cart reminders
    and back-in-stock features separately in the Maildroppa app, reviewing their content
    and sending settings before activation.

Use the same shop address and Maildroppa account for the direct connection and plugin
pairing. Pairing codes expire; generate a new code in Maildroppa if needed. WordPress
development and staging environments do not transmit live checkout data. Keep WordPress
cron running and check the plugin’s WooCommerce status for pending checkout updates.

## PMF

### How do checkout recovery and availability alerts use data?

 * After pairing, classic and block checkout collect the server-side cart, product
   and variant IDs, names, quantities, prices, currency, checkout ID, revision, 
   activity time and entered email address. Signed updates send those facts and 
   a personal recovery link from WordPress to `https://api.maildroppa.com/integrations/
   woocommerce/plugin/checkouts`. This is separate from newsletter signup and does
   not itself subscribe the visitor. Maildroppa applies the account’s configured
   reminder permissions and sending rules; connecting the plugin does not activate
   a reminder automation.
 * WordPress retains these checkout facts for up to 30 days from the original checkout.
   Recovery tokens and immutable delivery bodies are encrypted using the shop credential.
   Delivery attempts are limited to eight attempts and 24 hours. WP-Cron drives 
   delivery and expiry cleanup; missed cron runs delay physical deletion. Before
   each native reminder, Maildroppa requests the current checkout through the signed
   WordPress `/wp-json/maildroppa/v1/woocommerce/checkouts/state` endpoint. A closed,
   empty, expired or unavailable checkout cannot authorize a reminder.
 * Opening a personal recovery link displays a page without changing the cart. A
   deliberate form submission restores available items at current prices, and replacing
   an existing cart requires confirmation. Saved payment, login and billing details
   are not restored. A changed email address, completed order, expired link or revoked
   pairing prevents reuse of the old link. Disconnect invalidates access and pending
   technical work while retaining durable checkout facts under their existing expiry.
 * Product pages can display a purpose-specific availability form for an unavailable
   simple product or selected variant when enabled in Maildroppa. WordPress requests
   the signed form configuration and sends the selected product/variant IDs, email
   address, language and server-observed visitor IP address to `/integrations/woocommerce/
   plugin/back-in-stock/requests`. Maildroppa uses its existing confirmation and
   product-availability notification flow. This does not subscribe the visitor to
   newsletters. The browser submits to WordPress; this form does not load the remote
   hosted-form runtime.
 * WordPress personal-data export includes the person’s current checkout facts and
   any matching earlier recipient still present in an outstanding encrypted delivery,
   without recovery links, tokens or secrets. Explicit erasure removes matching 
   local checkout and delivery copies. A signed, encrypted erasure request between
   Maildroppa and WordPress binds the source, original credential and request ID.
   Local completion and outstanding remote completion are distinct. Encrypted confirmation
   work expires after 24 hours and then requires source-specific manual completion;
   minimal receipts contain only references, hashes and removal counts.

### How does WooCommerce checkout signup work?

With WooCommerce active, administrators can explicitly pair the shop under Maildroppa
> Settings > WooCommerce. Pairing sends a one-time code, the canonical shop URL 
and plugin/protocol versions to `https://api.maildroppa.com/integrations/woocommerce/
plugin/pairing`. The pairing request is authenticated with the existing API key;
a code from another Maildroppa account is rejected. The separate shop credential
is encrypted in WordPress and never exposed to the browser. Signed status and revocation
messages are sent to `/integrations/woocommerce/plugin/events`, with event IDs, 
timestamps, revisions, the installed plugin version and the shop URL. Non-production
WordPress environments do not transmit shop status or collect checkout signups. 
A site/account/API change blocks old work until deliberate reconnection.

When explicitly enabled, classic and block checkout display an optional, initially
unchecked newsletter checkbox with the configured consent text and topic labels.
Only an opted-in, successfully submitted checkout queues the billing email and first
name, selected topic IDs, displayed agreement, checkout source URL and submission
time. The WordPress server sends these to the authenticated idempotent `/subscribers/
wordpress-signup-requests/{requestId}` endpoint; central double opt-in applies. 
Address, phone, payment details and purchased products are excluded. Maildroppa 
signup settings are separate from the native WooCommerce order connection. Each 
checkout signup also identifies its original shop credential; Maildroppa verifies
its owner and active permission before accepting the signup. Revocation in the app
therefore prevents further signup acceptance immediately. Status checks refresh 
the local display every six hours; status is no longer current after 24 hours.

This uses the same eight-attempt limit, 24-hour signup expiry, Retry-After handling
and 30-day failed-record retention as the other form integrations. WordPress personal-
data export/erasure covers the local signup queue. Cron is required for delivery,
status checks and cleanup. Changing consent/topics or revoking/replacing the pairing
removes queued shop signups. Deactivating WooCommerce stops queued signups; they
end through the same bounded queue. Regular plugin updates preserve shop permission
and pending signed status bytes. Opted-in uninstall and explicit local account cleanup
remove the shop configuration and credentials.

The module supports HPOS and both checkout presentations. Checkout collection and
cart recovery require the matching version 1.4 backend contract; activate reminder
automations deliberately in Maildroppa.

### How does WPForms newsletter signup use the Maildroppa API?

 * Requires WPForms Lite or Pro and a connected Maildroppa service with the WordPress
   signup API. An administrator configures each form under Settings > Maildroppa
   in the WPForms builder. Available fields, topics and signup API availability 
   are requested from the configured Maildroppa API, using the API key. Maildroppa
   stores the field mapping, topic IDs and labels, consent text, and account/API/
   site binding in separate WordPress metadata. This configuration is not included
   in WPForms exports or duplicated forms.
 * The plugin adds an optional, initially unchecked newsletter checkbox before the
   submit button. JavaScript generates a random submission request ID before enabling
   it. Only successfully processed, non-spam submissions with consent queue the 
   mapped signup fields, selected topics, displayed consent, source URL and form
   ID, and submission time. Name fields mapped to first name send the first-name
   component. Message fields and attachments are excluded. Contact form processing
   and WPForms notifications remain independent of newsletter consent.
 * Delivery uses the same authenticated WordPress signup PUT endpoint, central double
   opt-in, retry schedule, 24-hour expiry, eight-attempt limit and 30-day failed-
   record retention as Contact Form 7. WP-Cron is required. Changes to account, 
   form, mapping or consent and deactivation of WPForms stop queued requests. Failed
   signups cannot be restarted without new consent. Account reset and opted-in uninstall
   remove Maildroppa metadata without deleting WPForms forms.
 * Update signup sources to register WPForms for future website signup attribution.
   The connected backend must support the WPFORMS integration type.

### What data do website signup reports and standard forms send?

 * Clicking «Update signup sources» sends authenticated PUT requests to `https://
   api.maildroppa.com/wordpress-sites/{siteId}` and `/wordpress-sites/{siteId}/placements/{
   placementId}`. These contain the site home URL, generated site and placement 
   identifiers, form names, Maildroppa form IDs when applicable, and the integration
   type (hosted, native, Contact Form 7, WPForms or WooCommerce). WordPress stores
   the identifiers and source configuration with their account, API-origin and site
   binding until local cleanup or an opted-in uninstall. Registered forms send their
   placement identifier with future signups so Maildroppa can attribute them to 
   this site; earlier and unattributed signups are excluded.
 * Opening or paging through the website report sends the site identifier, a 7- 
   or 30-day period and page number to `/wordpress-sites/{siteId}/signups`. Maildroppa
   returns signup email addresses, submission times, placement names, confirmation-
   email decisions and confirmation status, plus accepted and confirmed totals. 
   The report is available only to authenticated administrators and is not cached
   publicly.
 * Clicking «Create standard form» sends the entered form name and a stable request
   identifier in an authenticated PUT to `/form-builder/wordpress-standard/{requestId}`.
   This creates an inline form in the connected Maildroppa account; repeated requests
   for the same name on this site reuse that request identifier. The returned form
   ID is used to open the form editor in the Maildroppa app. Creating the form does
   not itself place it on the public website.

### Do I need a Maildroppa account?

Maildroppa accounts are available for business use; see the [Terms of Service](https://maildroppa.com/terms).

Yes. You need a Maildroppa account to create forms, generate an API key, and manage
audience data from WordPress.

### Is the Maildroppa API key exposed in frontend JavaScript?

No. The key is encrypted with a stable per-installation key in WordPress and authenticated
Maildroppa admin requests remain server-side. The settings field is masked by default.

### How are signup forms submitted?

Hosted and native WordPress forms use Maildroppa’s public browser flow. Visitor 
submissions go directly from the browser to Maildroppa and are not proxied through
the WordPress server.

### What if the local encryption key is missing or damaged?

Open **Maildroppa > Get started**. Restore the original `maildroppa_encryption_key_v1`
WordPress option from a trusted database backup to recover existing encrypted credentials.
Never replace a working key or delete connection records to bypass recovery. If 
no account webhook or WooCommerce shop permission depends on the damaged key, the
page offers an explicit reset that removes the unusable local API key and generates
a new encryption key. Forms, queued events and the stored account identity remain
unchanged; reconnect with a key for that same Maildroppa account. If existing data
has no recorded account identity and the old credential is unavailable, restore 
the original key from backup; a reset cannot prove that data’s ownership. If webhooks
or a WooCommerce shop permission exist, reset is blocked and the original key must
be restored. Remote connections are never revoked automatically.

### How do I switch to a different Maildroppa account?

Reconnect the previous account first and remove its forms, integrations and queued
events; a different account is blocked while this data exists. If the previous account
is no longer accessible, remove the API key and use «Remove previous account data»
under **Maildroppa > Get started**. This removes the data only from WordPress: webhook
subscriptions are not revoked in Maildroppa, so delete them in the Maildroppa app
if you still can.

### Can I use the block editor?

Yes. Active inline hosted forms and configured theme-styled forms each have a dedicated
Maildroppa block.

### Does the plugin include a classic widget?

Yes. Active inline Maildroppa forms can also be placed in a classic WordPress widget
area.

### What happens to failed WordPress event deliveries?

The plugin retries delivery at bounded intervals. Pending events expire after 30
days and cannot be sent or retried afterwards. Failed records can be diagnosed or
deleted under **Maildroppa > Settings > WordPress users**, including when the API
connection is unavailable. Retrying requires the original account and an event younger
than 30 days. Failed records are eligible for deletion 30 days after failure, so
an expired event can remain locally for about 60 days after creation. Daily cleanup
depends on WP-Cron running while the plugin is active; missed cron runs delay deletion.
The WordPress personal-data tools include these records.

### What happens when the plugin is deleted?

Local data is preserved by default. Complete local cleanup must first be explicitly
enabled under **Maildroppa > Settings > Data & uninstall** and is blocked while 
webhook subscriptions or reconciliation work remain. Remote Maildroppa data is never
deleted by uninstall.

### Must custom WordPress webhook listeners be idempotent?

Yes. The plugin records completion after all listeners of the corresponding WordPress
action return successfully. If a later listener fails or the request terminates,
Maildroppa can retry the event and an earlier successful listener can run again.
Each listener must use the stable event ID in its second action argument to prevent
duplicate business effects. Replay protection after completion is not an exactly-
once guarantee for custom listeners.

### Does Maildroppa log personal data?

The optional `debug` setting in `maildroppa_options` logs failed API requests only
when WordPress debug logging is enabled. It records method, redacted route, status
and error ID; API keys, message bodies and subscriber email addresses are excluded.
Keep debug logging disabled unless investigating a problem, restrict access to the
log and delete it after diagnosis.

### Is the plugin source available?

All PHP, JavaScript and CSS files are unminified source files; no build step is 
required. The bundled .mo and .json translation files are built from translation
sources maintained in the development repository.

## Ressenyes

No hi ha ressenyes per a aquesta extensió.

## Col·laboradors i desenvolupadors

«Maildroppa» és programari de codi obert. La següent gent ha col·laborat en aquesta
extensió.

Col·laboradors

 *   [ maildroppa ](https://profiles.wordpress.org/maildroppa/)

“Maildroppa” s’ha traduït a 7 configuracions regionals. Gràcies als [traductors](https://translate.wordpress.org/projects/wp-plugins/maildroppa/contributors)
per les seves aportacions.

[Traduïu «Maildroppa» a la vostra llengua.](https://translate.wordpress.org/projects/wp-plugins/maildroppa)

### Interessats en el desenvolupament?

[Navegueu pel codi](https://plugins.trac.wordpress.org/browser/maildroppa/), baixeu-
vos el [repositori SVN](https://plugins.svn.wordpress.org/maildroppa/), o subscriviu-
vos al [registre de desenvolupament](https://plugins.trac.wordpress.org/log/maildroppa/)
per [fisl de subscripció RSS](https://plugins.trac.wordpress.org/log/maildroppa/?limit=100&mode=stop_on_copy&format=rss).

## Registre de canvis

#### 1.4.0

 * Adds signed WooCommerce checkout updates, recipient-bound recovery links, current
   checkout verification, and product-alert forms.
 * Connects explicit personal-data erasure and revocation to durable, encrypted 
   delivery and bounded cleanup.
 * Supports classic and block checkout with HPOS and the classic order store.

#### 1.3.0

 * Add optional WooCommerce shop pairing with encrypted credentials and signed connection
   status and revocation.
 * Offer optional, initially unchecked newsletter signup in classic and block checkout,
   with HPOS support, central double opt-in, queued delivery and personal-data tools.

#### 1.2.0

 * Add WPForms newsletter signup with field and topic selection, an optional unchecked
   consent checkbox, central double opt-in, queued delivery and website signup attribution.
   WPForms Lite is supported.
 * Replace untranslated block labels and generic black icons with readable Maildroppa
   block titles, descriptions and branded blue form icons.

#### 1.1.0

 * Initial release: hosted and native signup forms, subscriber, field, tag and segment
   management, RSS newsletters, WordPress user events and signed Maildroppa event
   actions.

## Meta

 *  Versió **1.4.0**
 *  Darrera actualització **fa 2 dies**
 *  Instal·lacions actives **Menys de 10**
 *  Versió del WordPress ** 6.4 o posterior **
 *  Provada fins a **7.1.3**
 *  Versió del PHP ** 8.1 o posterior **
 *  Idiomes
 * [Czech](https://cs.wordpress.org/plugins/maildroppa/), [English (US)](https://wordpress.org/plugins/maildroppa/),
   [German](https://de.wordpress.org/plugins/maildroppa/), [Serbian](https://sr.wordpress.org/plugins/maildroppa/),
   [Spanish (Chile)](https://cl.wordpress.org/plugins/maildroppa/), [Spanish (Mexico)](https://es-mx.wordpress.org/plugins/maildroppa/),
   [Spanish (Spain)](https://es.wordpress.org/plugins/maildroppa/), i [Turkish](https://tr.wordpress.org/plugins/maildroppa/).
 *  [Traduïu a la vostra llengua](https://translate.wordpress.org/projects/wp-plugins/maildroppa)
 * Etiquetes
 * [Email Marketing](https://ca.wordpress.org/plugins/tags/email-marketing/)[newsletter](https://ca.wordpress.org/plugins/tags/newsletter/)
   [rss](https://ca.wordpress.org/plugins/tags/rss/)[signup forms](https://ca.wordpress.org/plugins/tags/signup-forms/)
   [woocommerce](https://ca.wordpress.org/plugins/tags/woocommerce/)
 *  [Vista avançada](https://ca.wordpress.org/plugins/maildroppa/advanced/)

## Valoracions

Encara no s'ha enviat cap ressenya.

[La vostra ressenya](https://wordpress.org/support/plugin/maildroppa/reviews/#new-post)

[Visualitza totes les ressenyes](https://wordpress.org/support/plugin/maildroppa/reviews/)

## Col·laboradors

 *   [ maildroppa ](https://profiles.wordpress.org/maildroppa/)

## Suport

Teniu quelcom a dir? Necessiteu ajuda?

 [Visualitza els fòrums de suport](https://wordpress.org/support/plugin/maildroppa/)