Works with your stack
Cookie consent for MailPoet: newsletters and engagement cookies
its consent is for emails
MailPoet sends newsletters and adds sign-up forms to your site. Its own tracking consent covers opens and clicks in emails, not cookies on your site. With its default engagement tracking, its server sets cookies for known subscribers that no banner can hold.
By MailPoet · mailpoet.com · WordPress.org
Is this your product? Tell us if anything here is out of date. Write to us
MailPoet
WordPress plugin
- Tested version
- 5.45.1
- How
- Tested automatically around each Cookie Rocks version
- Last test
- 7 November 2026
- Latest version
- 5.45.1 tested
- Active installs
- 500,000+
What MailPoet adds to your visitors’ browser
No trackers In our test of MailPoet 5.45.1 on 7 November 2026, the plugin itself added no tracker and no cookie. What you place in your pages with it, such as a video or a map, still counts.
What matters for consent with MailPoet
Two different consents
MailPoet asks subscribers whether to track email opens and clicks. That choice does not read your cookie banner, and the banner does not change it.
Cookies from the server
With full engagement tracking, the default, MailPoet sets cookies from PHP when a known subscriber logs in, confirms, orders or clicks a newsletter, then on later page views. A consent plugin cannot hold cookies set with the page. Lower the tracking level to Partial or Basic to stop them.
Captchas in forms
A form can use the built-in captcha, which sets no cookie, or reCAPTCHA or Turnstile. If that captcha script waits for consent, the form cannot be sent until the visitor accepts. The built-in one avoids the question.
Fonts in forms
Google Fonts in forms load only with “Load 3rd-party libraries” on. It is off by default; keep it off.
What our tests found on MailPoet
Good to know · TranslatePress, Weglot, Instagram Feed, WP Go Maps, MailPoet, MatomoTranslatePress, Weglot, MailPoet and others set nothing by default
by default: Default settings
With default settings and nothing set up, TranslatePress, Weglot, Instagram Feed, WP Go Maps, MailPoet and Matomo for WordPress set no cookie, use no storage and load no known third-party tool.
Seen in our tests, 17 October 2026, TranslatePress, Weglot, Instagram Feed, WP Go Maps, MailPoet, Matomo 3.3.8, 6.4.3, 6.14.0, 10.1.10, 5.42.0, 5.13.1. Source
Full detail
On a fresh WordPress home page with default settings (no account, key or content set up), TranslatePress, Weglot, Smash Balloon Instagram Feed, WP Go Maps, MailPoet and Matomo for WordPress set no cookie, keep nothing in the browser's storage and load no known third-party tool, after Accept all.
Good to know · MailPoetMailPoet's tracking consent covers emails, not the cookie banner
setting “tracking.consent.subscriber_choice” · by default: track_all
It covers email opens and clicks only, and MailPoet has no WP Consent API code. For visitors, its forms set only popup_form_dismissed_<id> (182 days) after closing a pop-up or subscribing.
Read in its code, 16 October 2026, MailPoet 5.42.0.
Full detail
MailPoet's subscriber tracking consent (track_all by default, ask_new, ask_all) covers email opens and clicks only; it does not read a cookie banner and does not cover cookies set at login or order. MailPoet has no WP Consent API code. For anonymous visitors, its forms set only popup_form_dismissed_<id>, by JavaScript, after closing a pop-up form or subscribing (182 days).
Depends on a setting · MailPoetMailPoet forms load Google or Cloudflare captcha only when it is chosen
setting “Load 3rd-party libraries” · by default: off
The built-in captcha sets no cookie. Google Fonts load only with Load 3rd-party libraries on (off by default). If the captcha script is held, the form cannot be sent before consent.
Read in its code, 16 October 2026, MailPoet 5.42.0.
Full detail
MailPoet forms load www.google.com/recaptcha/api.js or challenges.cloudflare.com/turnstile only when that captcha is chosen; the built-in captcha uses a hidden field and no cookie. Google Fonts in forms load from fonts.googleapis.com only when Load 3rd-party libraries is on (off by default). If the captcha script is held, public.js retries 20 times every 400 ms then gives up, so the form cannot be sent before consent.
Sent from your server · MailPoetMailPoet sets long-lived tracking cookies from the server, out of banners' reach
setting “Engagement analytics tracking” · by default: full
- With the default level (Full), mailpoet_subscriber (10 years) is set when a known subscriber logs in or orders.
- mailpoet_page_view (10 years) is then set on public pages.
- A newsletter click sets mailpoet_revenue_tracking (14 days) and mailpoet_subscriber.
- The Partial or Basic level, or the mailpoet_is_cookie_tracking_enabled filter, stops them.
Read in its code, 16 October 2026, MailPoet 5.42.0.
Full detail
With the default Engagement analytics tracking level (Full), MailPoet sets from PHP mailpoet_subscriber (10 years) when a known subscriber logs in, confirms, registers or places a WooCommerce order, then mailpoet_page_view (10 years) on public pages at most once a minute; a click in a newsletter sets mailpoet_revenue_tracking (14 days) and mailpoet_subscriber before redirecting. A consent plugin cannot hold them. Partial or Basic, or the mailpoet_is_cookie_tracking_enabled filter, stops them.
How we test it
Around each version, with its latest release
Around each Cookie Rocks version, a fresh WordPress installs its latest version from WordPress.org next to Cookie Rocks and runs the same checks. A new version joins the next run on its own.
- MailPoet 5.45.1, tested on 7 November 2026.
- The banner shows, the trackers of the test page wait for consent and load after it, and Cookie Rocks raises no PHP error.
- Settings of the test: Default settings after activation.
- Last run: MailPoet 5.45.1 on 7 November 2026, with WordPress 7.1.4.
Newsletters and popups
Other plugins of the same kind.
Questions
Is a fresh MailPoet install a problem?
No. With default settings and nothing set up, it sets no cookie and loads no outside tool on the home page. The cookies come with known subscribers.
What happens after the 30-day trial?
The banner, your visitors’ choices and your proofs of consent keep working. Without a key, most settings lock, updates and support stop. Take a key at any time and everything opens again.
For MailPoet users
Newsletters without cookies behind the banner.
lower the tracking level
Every feature of the complete plugin for 30 days, no card. MailPoet keeps working as it does today.
- During the trial: everything, including the full settings and the scans
- After 30 days without a key: the banner, your visitors’ choices and your proofs of consent keep working
- What waits for a key: most settings, updates and support
Get your trial key
Your e-mail and your site. Your key arrives as soon as you confirm your e-mail.