The Opt-in tab turns any campaign into an email capture. Switch on Turn this campaign into an opt-in and the form controls appear.
The form:
- Fields to ask for: email, first name, last name and phone, in any combination
- Email placeholder text
- Submit button text
- Success message shown after a successful opt-in
- Redirect after opt-in, an optional URL for a thank you page
Fewer fields convert better. Email only is the right starting point unless you have a concrete reason to ask for more.
Where the lead goes:
- Autoresponder: any service you connected on the Connections tab
- List: loaded live from that service, with a Refresh button
- Tags: a comma separated list, applied where the service supports tags
- Webhook URL: every lead is also posted there as JSON
- Or paste your own form code: raw form HTML from any provider, which replaces the built in form
Leave the autoresponder set to Save on this site only and the lead is still captured, stored and exportable. Nothing is lost.
Spam protection, built in:
Public forms have to work on cached pages, so they cannot rely on a nonce that goes stale. Instead the lead route is protected three ways. There is a hidden honeypot field that a real person never fills in, a minimum fill time of 2 seconds because bots submit instantly, and a rate limit of 20 submissions per IP address per hour. A caught bot is answered as though it succeeded, because telling a bot it failed only teaches it.
Where the lead is delivered is decided on the server from the campaign itself, never from anything the browser sends. The autoresponder, list ID, tags and webhook URL are stripped out of the payload the front end receives, so a visitor can never see or redirect somebody else's list.