ITSM Newsletter

ITSM Newsletter is a lightweight, self-hosted newsletter management plugin for WordPress. It manages signups and subscribers on your own WordPress site and sends mail through the existing WordPress mail transport (wp_mail()), which can be connected to your preferred SMTP provider.

Features include:

• Newsletter editor, HTML email rendering, previews and test sends.
• Double opt-in confirmation and unsubscribe links.
• Public unsubscribe page using [itsm_newsletter_unsubscribe].
• Required consent checkbox and configurable signup popup.
• Cloudflare Turnstile or Google reCAPTCHA v2 checkbox (optional services requiring configuration).
• Subscriber management and CSV import/export.
• Queued sending with retry and duplicate-send safeguards.
• Optional administrator notifications when subscribers confirm.
• Optional WooCommerce welcome coupons, including configurable restrictions and coupon email designs.
• Fixed UTM campaign parameters on eligible internal links for use with site analytics tools.
• German localization, with English as the source language.

ITSM Newsletter does not provide an SMTP service and does not guarantee inbox placement. The sending capabilities and limits depend on your website’s configured mail transport and host.

Privacy and external services: Subscriber and consent records are managed in your WordPress database. If you enable Turnstile or reCAPTCHA, a connection to the selected external CAPTCHA provider is required. Sending messages uses your configured mail transport, which may involve an external provider. Review the plugin’s privacy guidance and adapt your website’s privacy policy to your configuration. No tracking script is provided by the plugin; UTM parameters alone do not collect analytics.

Usage and limitations

The delivery queue processes up to 20 recipients per minute when WordPress Cron runs. A successful wp_mail() result means that the transport accepted the message, not that it reached an inbox. Hosting and mail service limits still apply. There is no automated bounce or complaint processing.

Only confirmed subscribers are eligible for newsletter delivery. Imported contacts require existing consent evidence; importing does not send messages or create welcome coupons. Use the CSV dry run before committing changes. Files are limited to 5 MB and 10,000 rows. Suppressed contacts are not reactivated by importing them again.

Live previews display unsaved text, colors and logos. Changes are persisted only when you save. Existing custom texts and subscriber data are not automatically translated. The bundled German PO/MO files are retained.

Activate individually per website; network activation is not supported. Welcome coupons require WooCommerce and are disabled on new installations. Back up your database and plugin files before updating.

Data and external services

The plugin stores email addresses, subscription status, timestamps, consent records and technical confirmation and delivery data in the WordPress database. It integrates with the WordPress personal-data export and erasure tools. Coupon records need separate retention review. Deactivating or deleting the plugin files does not automatically erase subscriber records or coupons. Unconfirmed signups are cleaned after 30 days through active queue processing; unsubscribe suppression records are retained.

The popup uses browser local storage to remember temporary dismissal. Optional administrator notifications contain the subscriber address, confirmation time and site name. Fixed UTM parameters on eligible internal email links do not identify individual recipients; analysis depends on separately configured website analytics.

Cloudflare Turnstile

When selected and configured, the popup loads the Turnstile client from Cloudflare when it opens. The browser contacts Cloudflare, exposing technical connection and browser information to that service. On signup, the server sends the verification token and configured secret to Cloudflare’s Siteverify endpoint. No CAPTCHA service is embedded in the public unsubscribe request form.

Service: https://www.cloudflare.com/products/turnstile/
Terms: https://www.cloudflare.com/terms/
Privacy: https://www.cloudflare.com/privacypolicy/

Google reCAPTCHA v2 Checkbox

When selected and configured, the popup loads Google’s reCAPTCHA client when it opens. The browser contacts Google and the server sends the verification token and configured secret to Google’s Siteverify endpoint. Technical connection and browser information is processed by that service.

Service: https://www.google.com/recaptcha/about/
Terms: https://policies.google.com/terms
Privacy: https://policies.google.com/privacy

Mail delivery

Messages are passed to the website’s configured WordPress mail transport. The operator chooses the mail service and must describe its data handling. This plugin does not configure an SMTP service or promise legal compliance or inbox delivery.