> How the MailerLite Plugin handles subscriber data and cookies in signup forms, with EU hosting, double opt-in and US subprocessors under the GDPR. > > Canonical: https://www.flowconsent.com/en/services/marketing/mailerlite-plugin Marketing # MailerLite Plugin Analytics · [Official website](https://ru.wordpress.org/plugins/official-mailerlite-sign-up-forms/) Embed newsletter signup forms and pop ups on your site with MailerLite. Subscriber data is processed primarily in the EU with some US subprocessors, requiring consent and double opt in. [Block MailerLite Plugin until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=marketing) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Marketing](https://www.flowconsent.com/en/services/marketing) - Consent Analytics - Prior consent Required - Documented cookies 3 - Third-party domains 4 - Servers European Union (primary processing in the EU with some subprocessors in the United States) Overview ## What does MailerLite Plugin do? ## **What is the MailerLite Plugin?** The MailerLite Plugin embeds newsletter signup forms and pop ups directly on your website and connects them to your MailerLite account. When a visitor submits a form their name and email address are sent to the MailerLite API and stored in your MailerLite subscriber list. MailerLite is operated by a company registered in Lithuania and processes data primarily in the European Union, but it relies on certain subprocessors located in the United States. ## **Data and cookies collected** The plugin collects the subscriber email address and name when a form is submitted. Embedded forms and pop ups set cookies to control how often a pop up is shown to a visitor, to track whether a visitor has already signed up, and to attribute a signup to a particular campaign or source. These cookies are non essential and require prior consent under the ePrivacy Directive. ## **GDPR and ePrivacy implications** Processing subscriber personal data for email marketing requires a legal basis. Consent under Article 6(1)(a) GDPR is the standard basis for marketing newsletters. Because MailerLite uses US based subprocessors, you must inform subscribers of international transfers and ensure a Data Processing Agreement is in place with MailerLite. The non essential cookies set by forms and pop ups require separate cookie consent before they are placed. ## **Consent requirements** Visitors must give freely given, specific, informed and unambiguous consent before their data is added to your mailing list, and again before non essential cookies are placed. MailerLite supports double opt in, which is strongly recommended to document consent and reduce the risk of spam complaints. Your consent mechanism must clearly state who processes the data, the purpose and the right to withdraw. ## **Data transfers** Primary processing takes place in the European Union, which is a compliance advantage. However MailerLite's subprocessor list includes vendors based in the United States. Transfers to those subprocessors rely on standard contractual clauses. You must disclose these transfers in your privacy policy and list the subprocessors in your record of processing activities. ## **Practical compliance steps** Sign the Data Processing Agreement in your MailerLite account settings. Enable double opt in for all signup forms. Block non essential MailerLite cookies until cookie consent is given. Update your privacy policy to name MailerLite, describe EU primary processing and disclose US subprocessors under standard contractual clauses. Add MailerLite cookies to your cookie policy. Review MailerLite's subprocessor list regularly for changes. Compliance ## MailerLite Plugin and the GDPR MailerLite Plugin is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent under Article 6(1)(a) GDPR for newsletter signup and for non essential pop up and tracking cookies - Risk level medium - Applicable regulations GDPR, ePrivacy Directive (2002/58/EC), and national marketing rules ### Impact assessment (DPIA) A DPIA is unlikely to be required for standard newsletter signup forms using MailerLite, given EU primary processing and double opt in. However, consider a DPIA if you collect special category data via forms or use pop ups with behavioural targeting. Document the legal basis for each form, ensure DPA with MailerLite is signed, and list all US subprocessors in your record of processing activities. ### Sample text for your banner > I agree to receive the newsletter and accept that my name and email address will be stored by MailerLite and processed in the EU. Some data may be transferred to US subprocessors under standard contractual clauses. I can unsubscribe at any time. Cookies and trackers ## What MailerLite Plugin sets and contacts - Tracking method Embedded MailerLite forms and pop ups that submit subscriber data to the MailerLite API and set cookies to manage display and attribution - Server location European Union (primary processing in the EU with some subprocessors in the United States) - Data transferred outside the EU Subscriber data is primarily processed in the European Union, but MailerLite uses subprocessors including in the United States under standard contractual clauses, which must be disclosed. ### Cookies set (3) | Name | Type | Duration | Purpose | | ----------------- | ---------- | -------------- | ------------------------------------------------------------------------------------------------------- | | mailerlite:popups | Functional | Several months | Stores whether a visitor has already seen or dismissed a MailerLite pop up to control display frequency | | ml\_subscriber | Functional | Session | Webform session cookie that manages the MailerLite signup flow and prevents duplicate submissions | | ml\_attribution | Marketing | Session | Tracks the source or campaign that led to a newsletter signup for attribution reporting in MailerLite | ### Third-party domains contacted (4) - `assets.mailerlite.com` - `connect.mailerlite.com` - `static.mailerlite.com` - `forms.mailerlite.com` Questions ## Frequently asked questions about MailerLite Plugin Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does the MailerLite Plugin set? The MailerLite Plugin can set a pop up display frequency cookie (often prefixed ml\_ or named mailerlite:popups) to prevent the same pop up appearing too often, a webform session cookie to manage the signup flow, and a signup attribution cookie to link a subscriber to a campaign. These cookies are functional or marketing in nature and are not essential to the core website, so consent is required before they are placed. ### Is consent required to use the MailerLite Plugin? Yes. Two separate consents are needed. First, the visitor must consent to receiving your newsletter before their email and name are added to your MailerLite list. This is consent under Article 6(1)(a) GDPR for email marketing. Second, the non essential cookies set by forms and pop ups require prior cookie consent under the ePrivacy Directive. Using double opt in for the newsletter signup is strongly recommended to evidence consent clearly. ### What is the legal basis for processing subscriber data with MailerLite? The legal basis is consent under Article 6(1)(a) GDPR. Visitors must actively opt in to your newsletter, and that consent must be freely given, specific, informed and unambiguous. Consent for the newsletter signup is separate from consent for non essential cookies. You must keep records of when and how consent was given, and subscribers must be able to withdraw consent at any time by unsubscribing. ### Does MailerLite transfer data to the United States? MailerLite is based in Lithuania and processes data primarily in the European Union, which is a compliance advantage. However MailerLite uses subprocessors, some of which are located in the United States. Transfers to those subprocessors rely on standard contractual clauses. You must disclose these US subprocessors in your privacy policy and in your record of processing activities. MailerLite publishes a list of its subprocessors in its Data Processing Agreement. ### Is a Data Protection Impact Assessment required for the MailerLite Plugin? A formal DPIA is unlikely to be required for standard newsletter signup forms using MailerLite, because the processing is not high risk given EU primary processing and the availability of double opt in. However you should consider a DPIA if you collect special category data via forms (for example health or political opinions), if you use pop ups with behavioural targeting, or if you combine MailerLite data with other datasets to profile subscribers in a way that significantly affects them. ### How do I implement the MailerLite Plugin compliantly? Sign the Data Processing Agreement in your MailerLite account settings before collecting any subscriber data. Enable double opt in for all signup forms to document consent. Configure your consent management platform to block MailerLite cookies until cookie consent is given. Add a clear privacy notice to each signup form explaining who processes the data and why. Update your privacy policy to name MailerLite as a processor, describe EU primary processing and disclose US subprocessors under standard contractual clauses. Review MailerLite's subprocessor list for changes at least annually. ### Are there privacy friendlier alternatives to the MailerLite Plugin? MailerLite is already one of the more privacy friendly email marketing tools because it is EU based and offers double opt in. Alternatives include Brevo (formerly Sendinblue, also EU based), Mailchimp (US based, higher transfer risk) and self hosted tools such as Listmonk or Mautic which keep all subscriber data on your own infrastructure. If minimising US data exposure is a priority, EU based providers or self hosted solutions are preferable. ### How do I update my cookie policy for the MailerLite Plugin? Add a dedicated entry for MailerLite in your cookie policy table. List at minimum the pop up frequency cookie (e.g. ml\_... or mailerlite:popups, functional, several months), the webform session cookie (functional, session) and the signup attribution cookie (marketing, session or short term). For each cookie state the name, provider (MailerLite), purpose, type and duration. Link the cookie policy entry to your consent management platform categories so visitors can accept or reject MailerLite cookies independently. Same category ## More services: Marketing [See the whole category](https://www.flowconsent.com/en/services/marketing) ### [ProProfs Quiz Maker](https://www.flowconsent.com/en/services/marketing/proprofs-quiz-maker) [ProProfs Quiz Maker is an interactive quiz and calculator builder that helps businesses create engaging, lead-generating content for their websites. It supports branching logic, scoring systems, and personalized result pages that increase engagement. ProProfs Quiz Maker integrates with email marketing and CRM platforms to capture and segment leads based on responses. With customizable designs and embeddable formats, ProProfs Quiz Maker drives conversions through interactive content marketing.](https://www.flowconsent.com/en/services/marketing/proprofs-quiz-maker) [Marketing](https://www.flowconsent.com/en/services/marketing/proprofs-quiz-maker) · ### [VYVE+](https://www.flowconsent.com/en/services/marketing/vyve) [Vyve+ is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. Vyve+ integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, Vyve+ makes advanced AI accessible to all teams.](https://www.flowconsent.com/en/services/marketing/vyve) [Marketing](https://www.flowconsent.com/en/services/marketing/vyve) · ### [CASAFARI](https://www.flowconsent.com/en/services/marketing/casafari) [Casafari is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Casafari provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Casafari helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/marketing/casafari) [Marketing](https://www.flowconsent.com/en/services/marketing/casafari) · ### [Popcorn CRM](https://www.flowconsent.com/en/services/marketing/popcorn-crm) [Popcorn CRM is a customer relationship management (CRM) platform that helps businesses organize, track, and nurture customer interactions across the entire lifecycle. It provides contact management, sales pipeline tracking, and automated workflows. Popcorn CRM centralizes customer data from multiple touchpoints, enabling personalized experiences, faster deal closing, and improved retention. With reporting dashboards and integrations, Popcorn CRM empowers data-driven relationship management.](https://www.flowconsent.com/en/services/marketing/popcorn-crm) [Marketing](https://www.flowconsent.com/en/services/marketing/popcorn-crm) · ### [Emotive](https://www.flowconsent.com/en/services/marketing/emotive) [Emotive is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Emotive enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Emotive empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/marketing/emotive) [Marketing](https://www.flowconsent.com/en/services/marketing/emotive) · ### [Connectally](https://www.flowconsent.com/en/services/marketing/connectally) [Connectally is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Connectally enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Connectally empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/marketing/connectally) [Marketing](https://www.flowconsent.com/en/services/marketing/connectally) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)