smartEngin Forms

smartEngin Forms is a lightweight contact form plugin. Build as many forms as you like by clicking them together, style them without code and embed them with a shortcode. The interface follows your WordPress language; English and German are bundled, and more languages can be added through translation packs.

Features

• Drag-and-drop form builder: text, email, phone, number, date/time, choice fields (dropdown/multi-select/radio/checkbox), file upload, first & last name, GDPR consent and more.
• Preconfigured quick fields (salutation, subject, budget, message and more).
• Design without code: colours, spacing, radius and shadows via sliders and colour pickers, plus an optional two-part “hero card” with content widgets.
• Delivery to multiple recipients, reply-to and subject placeholders.
• Confirmation email to the sender with its own block editor and field placeholders.
• Automatic spam protection: nonce (CSRF), honeypot, timestamp check, per-IP rate limit and block lists (emails/words/IPs).
• Optional captcha: Cloudflare Turnstile (recommended), hCaptcha or Google reCAPTCHA v2 – enabled per form, invisible mode supported.
• Newsletter opt-in: forward a subscription to an external service (Brevo, Mailchimp or MailerLite) – only when the visitor ticks the newsletter consent box.
• File uploads with type, size and count limits and a protected storage location.
• Submissions are stored, viewable in the admin area and removed automatically after a configurable retention period (including their upload files).
• GDPR: configurable retention periods, separate consents, no external scripts unless explicitly enabled.
• Deliverability: emails are sent as multipart (HTML + plain text), based on wp_mail() (compatible with SMTP plugins).

External services

This plugin loads no external scripts on its own. Only when you enable a captcha in a form does it load the script of the provider you selected and transmit the visitor’s IP address to that service for verification:

• Cloudflare Turnstile – script challenges.cloudflare.com, verification via challenges.cloudflare.com/turnstile/v0/siteverify. Privacy policy: https://www.cloudflare.com/privacypolicy/
• hCaptcha – script js.hcaptcha.com, verification via hcaptcha.com/siteverify. Privacy policy: https://www.hcaptcha.com/privacy
• Google reCAPTCHA v2 – script google.com/recaptcha, verification via google.com/recaptcha/api/siteverify. Privacy policy: https://policies.google.com/privacy

Add the provider you enable to your site’s privacy policy.

If you connect a newsletter service under “Newsletter” and enable it for a form, the submitted email address (and, if present, the name) is sent to that service to create/update a contact – but only when the visitor ticks the newsletter consent box:

• Brevo – contact sent to api.brevo.com/v3/contacts; lists loaded from api.brevo.com/v3/contacts/lists. Privacy policy: https://www.brevo.com/legal/privacypolicy/
• Mailchimp – contact sent to <dc>.api.mailchimp.com/3.0/lists/…/members; audiences loaded from <dc>.api.mailchimp.com/3.0/lists. Privacy policy: https://www.intuit.com/privacy/statement/
• MailerLite – subscriber sent to connect.mailerlite.com/api/subscribers; groups loaded from connect.mailerlite.com/api/groups. Privacy policy: https://www.mailerlite.com/legal/privacy-policy

No newsletter data is sent unless you configure a provider, enable it for a form and the visitor consents. Add the provider you use to your privacy policy and data-processing records.