Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
MailMunch is a US email marketing and lead generation platform offering popups, embedded forms, landing pages, and email campaigns. Its on site forms set cookies to control display and capture subscriber details such as name and email, along with technical data like IP address, and it then stores and markets to those contacts. Because it sets non essential cookies and is US operated, it requires prior consent under the GDPR and the ePrivacy Directive and transfers data to a third country.
MailMunch is an email marketing and lead generation platform operated from the United States that provides popups, embedded opt in forms, landing pages, and email campaigns. Site owners use its forms to grow an email list and then send newsletters and automations. Adding MailMunch loads a script that displays forms and stores cookies in the visitor browser.
MailMunch processes the subscriber details people enter, typically name and email, the behaviour that triggers a form such as time on page or exit intent, and technical data like IP address and device. It sets cookies to remember whether a form was shown and to attribute subscriptions. The contact data then feeds email marketing, which is further processing.
The on site forms set non essential cookies and capture personal data for marketing, so the ePrivacy Directive requires prior consent for the cookies and clear consent for marketing emails. The GDPR requires a lawful basis, transparency, and a data processing agreement because MailMunch acts as your processor. Pre ticked boxes and bundled consent are not valid.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Obtain prior, opt in consent before MailMunch sets cookies, and use clear, separate opt in for email marketing rather than a pre ticked box. Block the script behind your consent banner so forms load only after the cookie category is accepted. Make consent specific and easy to withdraw, and honour unsubscribe requests promptly.
MailMunch is operated from the United States and processes subscriber and behavioural data there, so its use involves a third country transfer under Chapter V of the GDPR. Transfers rely on Standard Contractual Clauses and, where applicable, the EU US Data Privacy Framework, supported by a transfer impact assessment. Document the contact data sent to the US.
To use MailMunch compliantly, gate its cookies behind consent, use clear marketing opt in, and sign a data processing agreement. Complete a transfer impact assessment, minimise the data you collect in forms, set retention limits, and provide easy unsubscribe. List MailMunch in your cookie policy and privacy notice and review it periodically.
Websites using MailMunch must obtain user consent under GDPR regulations.
DPIA considerations
MailMunch captures contact details for email marketing and tracks behaviour to trigger forms, which raises its risk profile. Key DPIA points: (1) transfer of subscriber and behavioural data to MailMunch in the United States, requiring SCCs or the Data Privacy Framework and a transfer impact assessment; (2) collection of names and emails for ongoing marketing, which needs valid consent; (3) non essential cookies that require consent; (4) behavioural triggers such as exit intent that profile visitors; (5) the need for a data processing agreement, retention limits, and easy unsubscribe. A DPIA is advisable for large scale list building.
Sample consent text
We use MailMunch to offer newsletter sign up and special offers. With your consent, MailMunch sets cookies and shows opt in forms, and it stores the name and email you provide along with your IP address to send you the emails you requested. This data is processed by MailMunch in the United States under appropriate safeguards. You can withdraw your consent and unsubscribe at any time.
Third-party domains contacted
mailmunch.comapp.mailmunch.comcdn.mailmunch.coCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| mailmunch_shown | Functional | 30 days | Remembers that a form was already shown to a visitor to avoid repeating it. |
| mailmunch_visitor | Analytics | 1 year | Visitor identifier used to attribute subscriptions and measure form performance. |
| mailmunch_second_pageview | Functional | Session | Tracks page views within a session to trigger forms at the configured time. |
MailMunch collects user analytics data — you legally need a consent banner. Try FlowConsent free.
MailMunch sets cookies that remember whether a form was already shown and attribute new subscriptions, and may set analytics cookies. These are non essential and require consent. The subscriber details people enter are stored separately as contact data.
Yes. MailMunch sets non essential cookies and captures contact details for marketing, so obtain prior, opt in consent for the cookies and separate, clear consent for email marketing. Do not use pre ticked boxes.
The cookies rely on consent (Art. 6(1)(a)) and the ePrivacy Directive. Sending marketing emails to subscribers relies on consent under the ePrivacy marketing rules, with limited exceptions for the soft opt in to existing customers.
Yes. MailMunch is operated from the United States and processes data there, so its use is a third country transfer. It relies on Standard Contractual Clauses and, where applicable, the EU US Data Privacy Framework, which you should document in a transfer impact assessment.
A DPIA is advisable for large scale list building. Assess the US transfer, the contact data collected, the behavioural triggers, the cookies set, and your retention and unsubscribe processes.
Block MailMunch behind your consent banner, use clear marketing opt in, sign a data processing agreement, and complete a transfer impact assessment. Minimise form fields, set retention limits, provide easy unsubscribe, and document MailMunch in your cookie policy and privacy notice.
Yes. EU based email marketing and form tools, or a self hosted newsletter system, reduce third country transfers and keep subscriber data in the EU. They provide list building and campaigns with more control over data location.
Add a MailMunch entry listing its cookies, their purposes and durations, and the fact that subscriber data is processed by MailMunch in the United States. Link to MailMunch''s privacy notice and review the entry when its cookies or subprocessors change.