FirstFiveMin

FirstFiveMin answers your new leads while they are still interested — your phone rings first, and if
you cannot take it, an assistant calls them, qualifies them, and books them onto your calendar.

This plugin is the WordPress half of that, and it is deliberately small. You paste the widget key from
your FirstFiveMin dashboard, and the plugin loads the FirstFiveMin form on your pages. Everything else —
the form, the consent record, the call — happens in FirstFiveMin.

Where the form shows. Under Settings → FirstFiveMin, “Show as” offers three choices:

• A corner button on every page (the default). A small button sits in the corner of every page and
  opens the form. It adds nothing to your page layout. Above the form, the button can also offer the
  other ways to reach you that you turn on in FirstFiveMin: call, text, your reviews and your contact
  card. Each one shows only when it is set up there.
• Only where you add it. Add [firstfivemin] to a page or post, or the FirstFiveMin form block
  in the block editor, and the form shows right there.
• Both. The corner button on every page, and the form where you add it. On a page that has the
  form, the button takes the visitor to it.

Your other ways to be reached, anywhere on your site. Besides the form, the same shortcode and block
can place one of your other ways to be reached, wherever you want it: in the FirstFiveMin form block,
choose it under “What this block shows”, or add a type to the shortcode:

• [firstfivemin type="call"] and [firstfivemin type="text"]: a Call or Text button for your own line.
• [firstfivemin type="reviews"]: a link to your reviews.
• [firstfivemin type="contact"]: “Save our contact”, which opens your contact card.
• [firstfivemin type="qr"]: a QR code for your contact card, so a visitor on a computer can save you on
  their phone.
• [firstfivemin type="page"]: a link to your page on FirstFiveMin.
• [firstfivemin type="book"]: “Book a call”, which opens the form at its time choice so the visitor picks when you call. It shows
  on a page that also has the form or the corner button.
• [firstfivemin type="directions"]: “Directions”, a map link to the address you typed in FirstFiveMin (Settings, Quick replies),
  shown once you turn on the Directions tile on the Get leads page.

Each one shows only when it is set up in FirstFiveMin, with the same words and links as your corner
button. One that is not set up shows nothing, never a button that does not work. You can place as many
as you like on a page.

How it looks. Light, dark, or transparent (the form takes your site’s colours), a button colour, how
round the corners are, the width, your site’s font or the form’s own, and which corner the button sits
in. A button colour too light for white text is refused and the standard blue is used, so the button
always stays readable. No choice changes the consent wording on the form. The same choices, with a live
preview, are on the Get leads page in FirstFiveMin.

What it does not do. We think a site owner should be able to check this in about a minute, so
there is not much to check:

• It makes no outbound request of its own — not on activation, not on save, not on a page view.
  The only thing that contacts FirstFiveMin is the form script, running in your visitor’s browser.
• It collects and stores no visitor data. No database table, no cookie, nothing read about the
  visitor.
• It registers no REST route and no AJAX handler. Its shortcode and its block print an empty
  placeholder that the form fills.
• It uses no eval, no obfuscation, and runs no code it fetches on your server.
• When you uninstall it, it deletes its options and leaves nothing behind.

One thing to set on the FirstFiveMin side. On the same Get leads page in FirstFiveMin, add your
site under Allowed website domains, or leads from here are refused. That refusal is on purpose — it
is what stops somebody else embedding your form on their site and filling your dashboard.

External services

This plugin shows the FirstFiveMin lead form, a service run by FirstFiveMin (https://firstfivemin.com/).
Your server never contacts FirstFiveMin because of this plugin. Everything below happens in your
visitor’s browser, on the pages where the form or the corner button shows. Like any web request, each
one carries the visitor’s IP address and browser details.

• When the page loads: the browser loads the form script from
  https://firstfivemin.com/pages/widget/stl-widget.js (or the FirstFiveMin address you set) and asks
  FirstFiveMin for the form’s settings, sending your widget key and the page’s language. On a page where
  you placed any of your other ways to be reached, it asks for those too (which ones the page has), and
  draws them from the answer.
• When a visitor types a phone number and leaves that field: the number is sent to FirstFiveMin to
  check whether it is outside calling hours, so the form can offer a time for the call. It is not saved.
• Only if you are testing two versions of the form: the browser remembers, for that visit only
  (session storage), which version it showed; and when the visitor first clicks into the form, a count
  that the form was started is sent, with nothing the visitor typed.
• When a visitor submits the form: what they typed (their name, phone, email and the other fields
  shown) and their answer to the consent question on the form are sent to your FirstFiveMin account,
  together with your widget key.
• Why: so your FirstFiveMin account receives the lead and can reach them as the visitor agreed.
• FirstFiveMin terms of service: https://firstfivemin.com/terms
• FirstFiveMin privacy policy: https://firstfivemin.com/privacy

The form also uses Cloudflare Turnstile, a check that tells people apart from automated spam. When a
visitor submits the form, the Turnstile check loads from https://challenges.cloudflare.com/, and
Cloudflare receives the browser and network details it needs for that check.

• Cloudflare Turnstile privacy addendum: https://www.cloudflare.com/turnstile-privacy-policy/
• Cloudflare terms of use: https://www.cloudflare.com/website-terms/

Privacy

This plugin stores four options in your WordPress database — your widget key, the FirstFiveMin
address, “Show as”, and your look choices — and nothing else. It does not read or store any
information about your visitors. Information your visitors type into the FirstFiveMin form goes to
FirstFiveMin under the consent shown on that form; see https://firstfivemin.com/privacy and
“External services” above.