MailMunch
MailMunch is a US email marketing and lead generation platform offering popups, embedded forms, landing pages, and email campaigns. Its on site forms set cookies to control display and capture subscriber details such as name and email, along with technical data like IP address, and it then stores and markets to those contacts. Because it sets non essential cookies and is US operated, it requires prior consent under the GDPR and the ePrivacy Directive and transfers data to a third country.
What does MailMunch do?
What MailMunch is
MailMunch is an email marketing and lead generation platform operated from the United States that provides popups, embedded opt in forms, landing pages, and email campaigns. Site owners use its forms to grow an email list and then send newsletters and automations. Adding MailMunch loads a script that displays forms and stores cookies in the visitor browser.
What data and cookies MailMunch collects
MailMunch processes the subscriber details people enter, typically name and email, the behaviour that triggers a form such as time on page or exit intent, and technical data like IP address and device. It sets cookies to remember whether a form was shown and to attribute subscriptions. The contact data then feeds email marketing, which is further processing.
GDPR and ePrivacy implications
The on site forms set non essential cookies and capture personal data for marketing, so the ePrivacy Directive requires prior consent for the cookies and clear consent for marketing emails. The GDPR requires a lawful basis, transparency, and a data processing agreement because MailMunch acts as your processor. Pre ticked boxes and bundled consent are not valid.
When consent is required
Obtain prior, opt in consent before MailMunch sets cookies, and use clear, separate opt in for email marketing rather than a pre ticked box. Block the script behind your consent banner so forms load only after the cookie category is accepted. Make consent specific and easy to withdraw, and honour unsubscribe requests promptly.
Data transfers outside the EU
MailMunch is operated from the United States and processes subscriber and behavioural data there, so its use involves a third country transfer under Chapter V of the GDPR. Transfers rely on Standard Contractual Clauses and, where applicable, the EU US Data Privacy Framework, supported by a transfer impact assessment. Document the contact data sent to the US.
Practical compliance steps
To use MailMunch compliantly, gate its cookies behind consent, use clear marketing opt in, and sign a data processing agreement. Complete a transfer impact assessment, minimise the data you collect in forms, set retention limits, and provide easy unsubscribe. List MailMunch in your cookie policy and privacy notice and review it periodically.
MailMunch and the GDPR
MailMunch is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent (Art. 6(1)(a) GDPR) for cookies and email marketing capture
- Risk level
- high
- Applicable regulations
- GDPR, ePrivacy Directive (Cookie Law), CCPA
Impact assessment (DPIA)
MailMunch captures contact details for email marketing and tracks behaviour to trigger forms, which raises its risk profile. Key DPIA points: (1) transfer of subscriber and behavioural data to MailMunch in the United States, requiring SCCs or the Data Privacy Framework and a transfer impact assessment; (2) collection of names and emails for ongoing marketing, which needs valid consent; (3) non essential cookies that require consent; (4) behavioural triggers such as exit intent that profile visitors; (5) the need for a data processing agreement, retention limits, and easy unsubscribe. A DPIA is advisable for large scale list building.
Sample text for your banner
We use MailMunch to offer newsletter sign up and special offers. With your consent, MailMunch sets cookies and shows opt in forms, and it stores the name and email you provide along with your IP address to send you the emails you requested. This data is processed by MailMunch in the United States under appropriate safeguards. You can withdraw your consent and unsubscribe at any time.
What MailMunch sets and contacts
- Tracking method
- On site opt in forms and popups with behavioural triggers and cookies, feeding email marketing
- Server location
- United States (MailMunch)
- Data transferred outside the EU
- MailMunch is operated from the United States and processes subscriber and behavioural data there. Transfers rely on Standard Contractual Clauses (Art. 46 GDPR) and, where applicable, the EU US Data Privacy Framework, and should be supported by a transfer impact assessment.
Cookies set (3)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| mailmunch_shown | Functional | 30 days | Remembers that a form was already shown to a visitor to avoid repeating it. |
| mailmunch_visitor | Analytics | 1 year | Visitor identifier used to attribute subscriptions and measure form performance. |
| mailmunch_second_pageview | Functional | Session | Tracks page views within a session to trigger forms at the configured time. |
Third-party domains contacted (3)
mailmunch.comapp.mailmunch.comcdn.mailmunch.co
Frequently asked questions about MailMunch
Can't find your question? Write to us, we answer fast.
What cookies does MailMunch set?
MailMunch sets cookies that remember whether a form was already shown and attribute new subscriptions, and may set analytics cookies. These are non essential and require consent. The subscriber details people enter are stored separately as contact data.
Do I need consent to use MailMunch?
Yes. MailMunch sets non essential cookies and captures contact details for marketing, so obtain prior, opt in consent for the cookies and separate, clear consent for email marketing. Do not use pre ticked boxes.
What is the legal basis for MailMunch?
The cookies rely on consent (Art. 6(1)(a)) and the ePrivacy Directive. Sending marketing emails to subscribers relies on consent under the ePrivacy marketing rules, with limited exceptions for the soft opt in to existing customers.
Does MailMunch transfer data to the US?
Yes. MailMunch is operated from the United States and processes data there, so its use is a third country transfer. It relies on Standard Contractual Clauses and, where applicable, the EU US Data Privacy Framework, which you should document in a transfer impact assessment.
Is a DPIA needed for MailMunch?
A DPIA is advisable for large scale list building. Assess the US transfer, the contact data collected, the behavioural triggers, the cookies set, and your retention and unsubscribe processes.
How do I implement MailMunch compliantly?
Block MailMunch behind your consent banner, use clear marketing opt in, sign a data processing agreement, and complete a transfer impact assessment. Minimise form fields, set retention limits, provide easy unsubscribe, and document MailMunch in your cookie policy and privacy notice.
Are there alternatives to MailMunch?
Yes. EU based email marketing and form tools, or a self hosted newsletter system, reduce third country transfers and keep subscriber data in the EU. They provide list building and campaigns with more control over data location.
How do I update my cookie policy for MailMunch?
Add a MailMunch entry listing its cookies, their purposes and durations, and the fact that subscriber data is processed by MailMunch in the United States. Link to MailMunch''s privacy notice and review the entry when its cookies or subprocessors change.
Customer.io
Customer.io is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Customer.io enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Customer.io empowers marketing teams to achieve measurable growth.
Lifter Apps Pop-up Window
Lifter Apps Pop-up Window is a conversion optimization tool that helps websites create engaging popups, overlays, and on-site messages to capture leads and boost conversions. It features an intuitive visual builder, advanced targeting rules, and A/B testing. Lifter Apps Pop-up Window supports exit-intent detection, scroll triggers, and time-based displays, ensuring messages appear at the optimal moment. With CRM and email marketing integrations, Lifter Apps Pop-up Window helps businesses grow subscriber.
Leadscore
LeadScore is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. LeadScore enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, LeadScore empowers marketing teams to achieve measurable growth.
PushAd
PushAd is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. PushAd integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, PushAd helps organizations maintain robust websites that meet user expectations and technical requirements.
HulkApps Form Builder
HulkApps Form Builder is a form building and data collection platform that helps businesses create professional online forms, surveys, and questionnaires without coding. It offers a drag-and-drop builder, conditional logic, file uploads, and payment collection. HulkApps Form Builder integrates with CRM, email marketing, and productivity tools to automate workflows triggered by submissions. With responsive designs and spam protection, HulkApps Form Builder helps capture leads and collect data securely.
PathFactory
PathFactory is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. PathFactory enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, PathFactory empowers marketing teams to achieve measurable growth.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.