Camerce Popup Campaigns – Exit Intent, Email Opt-in & Announcement Bar

Camerce Popup Campaigns is a WordPress popup plugin for exit-intent popups, email opt-in forms, slide-ins and announcement bars. Build a campaign in a visual builder, choose when it appears, and watch the conversions — without an account, an impression limit, or a third-party service.

It is also built to survive a full-page cache, which most popup plugins are not. More on that below.

See every format running on the live demo site

Features

• Visual popup builder — headings, text, images, buttons and opt-in forms, arranged on a live preview
• Five templates and eight block patterns to start from
• Email opt-in and lead capture — submissions stored in your own database, exportable as CSV
• Conversion analytics — views, interactions, conversions and rate, per campaign and per day
• Spam protection — honeypot, timing check, per-IP rate limiting and email validation
• Block editor support — opt-in form, dismiss button and countdown blocks
• No impression limits, no account, no phoning home
• Lightweight — about 10.4 KB of JavaScript and 3.5 KB of CSS, gzipped, with no jQuery

Campaign formats

• Centre modal — the classic dialog over a dimmed page
• Announcement bar — a slim notification bar pinned to the top or bottom
• Slide-in — a small card in a corner, less interruptive than a modal

Popup triggers

Exit intent, time on page, scroll depth, click on any CSS selector, element scrolling into view, visitor inactivity, and manual opening from a link or your own JavaScript. Every trigger is in the free plugin.

Targeting and scheduling

Show a popup everywhere, or on a specific page, post type, taxonomy term, URL pattern, the front page, search results, archives or a 404. Narrow it further by login state, user role, device, new or returning visitor, referrer and UTM parameters. Schedule a campaign to a date range, particular weekdays, or a time of day.

Frequency is yours to set: always, once ever, once per session, or once every few days — and you can stop showing a campaign once someone converts or dismisses it.

It works behind a page cache

Most popup plugins decide who sees what in PHP while the page is being built. That makes the HTML different for every visitor, which is exactly what a full-page cache cannot store.

This plugin splits the decision in two. Page rules run on the server and cache along with the page. Visitor rules run in the browser from inert JSON. A cached page and an uncached page behave identically, and you do not need to exclude anything from your cache.

If no campaign targets the current URL, the plugin outputs nothing at all — no stylesheet, no script, no empty container.

Camerce Popup Campaigns Pro

The free plugin is the whole engine, not a sample of one. Pro adds the full-screen mat and inline embed formats, a countdown element, more builder elements and templates, email provider integrations (Mailchimp, Brevo, ConvertKit and others), and advanced analytics.

See what Pro adds

Free and paid

The free plugin has no impression limit, no watermark, no account, no trial and no feature that stops working. Nothing in it is locked or waiting to be paid for: the paid features are not in this plugin at all, they are a separate add-on that installs alongside it.

In the free plugin

• Three formats: centre modal, notification bar, slide-in
• Nine builder elements: heading, text, image, button, form, list, divider, spacer, dismiss link
• Five templates: newsletter signup, exit-intent discount, announcement bar, cookie consent, welcome slide-in
• Eight block patterns, and the form, dismiss and countdown blocks for the block editor
• Every trigger, including exit intent, scroll depth, element visible, inactivity and click
• The full targeting engine: page rules, visitor rules, frequency caps, scheduling, priority
• Conversion analytics, lead capture and CSV export
• A camerce_popups_lead_captured action, so leads can be delivered anywhere you can write a hook for
• Google Fonts and system font stacks

Triggers and targeting are deliberately not split. A popup that cannot decide who sees it is not a popup, and gating exit intent — the feature nearly every other plugin puts behind a paywall — would make the free version a demo rather than a tool.

In the separate paid add-on

A different plugin, installed alongside this one. None of its code is in this plugin, so nothing here is disabled, limited or waiting to be unlocked.

• Two more formats: full-screen mat and inline embed
• Four more builder elements: countdown, multi-column row, badge, custom HTML
• Fifteen more templates, including the image-led designs
• Nine email provider integrations: Mailchimp, Brevo, MailerLite, Kit, Klaviyo, ActiveCampaign, HubSpot, FluentCRM and a generic webhook, with a screen to connect them

Planned for it, and not written yet: A/B testing, advanced analytics, WooCommerce targeting, revenue attribution and multi-step campaigns. Treat those as a plan and not a promise.

A campaign built with the add-on keeps its saved settings if the add-on is later removed. Nothing is rewritten or deleted: the format and the elements stay in the database exactly as you left them, and reinstalling the add-on brings the campaign back looking as it did. While the add-on is gone, a campaign using one of its formats has no styling for that format, because the code for it lives in the add-on and not here.

Note that the countdown exists twice: as a block for the block editor, which is in the free plugin, and as a builder element, which is part of the add-on.

This plugin offers three formats and implements exactly those three. It carries no code for the add-on’s formats or elements — not disabled, not hidden, simply absent — which is why removing the add-on takes its formats with it rather than leaving a half-working copy behind.

External services

This plugin can connect to third-party services. None of them is contacted
unless you switch it on, and none of them is used on a default install.

Google Fonts — https://fonts.googleapis.com and https://fonts.gstatic.com

A campaign only requests a Google font if you pick one for that campaign; the
default font setting is “inherit from the theme”, which sends no request at
all. When a campaign that uses a Google font renders on a page, the visitor’s
browser loads one stylesheet from fonts.googleapis.com and the font files it
names from fonts.gstatic.com. That request carries the visitor’s IP address and
user agent to Google, as any browser request does. If that matters for your
jurisdiction, leave the font set to “Theme font” or “System font”, which are
served entirely from the visitor’s own device.

Google Fonts terms: https://developers.google.com/fonts/terms
Google privacy policy: https://policies.google.com/privacy

Email marketing providers — not part of this plugin

This plugin sends leads nowhere. There is no provider code in it, no screen to
enter an API key, and no outbound request: a captured lead is written to your
own database and stays there unless you write a hook to move it.

Connecting Mailchimp, Brevo, MailerLite, Kit, Klaviyo, ActiveCampaign, HubSpot,
FluentCRM or a webhook is done by a separate add-on plugin, which carries its
own code and its own documentation of those services. Nothing in this plugin
waits on it.

Privacy

What Camerce Popup Campaigns stores, and where

{prefix}camerce_popups_events — one row per analytics event. Columns: campaign ID, variant label, event type (`view`, `interaction`, `conversion` or `close`), a hashed session identifier, the page path, a device bucket (`desktop`, `tablet` or `mobile`), and a timestamp. There is no IP address column, no user-agent column and no user-ID column. The submitted URL is reduced to its path and query before storage — scheme, host, credentials and fragment are discarded. Retention is configurable and defaults to 30 days.

{prefix}camerce_popups_stats_daily — one row per campaign, variant and date, holding four counters. It contains no visitor data of any kind. Retention is configurable and defaults to 90 days.

{prefix}camerce_popups_leads — one row per form submission: campaign ID, email address, name, the remaining submitted fields as JSON, the page the form was submitted from, a status and a sync status, and a timestamp. This is the only Camerce Popup Campaigns table that contains personal data, and it exists only because a visitor typed the data into a form. Storage can be switched off per campaign, in which case the submission is handed to your email service and never written locally.

Post meta prefixed _camerce_popups_ holds campaign settings and the compiled rule bundle. Options prefixed camerce_popups_ hold plugin settings, the autoloaded targeting index and the schema version. The free plugin stores no email-service credentials, because it connects to no provider. The paid add-on keeps them in the camerce_popups_integration_keys option rather than post meta, which is exposed through revisions, exports and the REST API in ways an API key should not be, and never sends a raw credential to the browser.

What is hashed

The session identifier. The browser generates a random token, keeps it in sessionStorage, and sends it with each event; the server hashes it again with your site’s authentication salts before storing it, so the value in the table is meaningless outside your install.

The rate limiter’s client key. The visitor’s IP address is read, hashed with your site’s salts, truncated, and used as a transient name. The address is not stored, not logged, and not returned to anything.

What is never stored

IP addresses, user agents, WordPress user IDs, referrer strings, and UTM values. The referrer and the UTM parameters are read in the browser to decide whether a campaign is eligible, and are never sent to the server.

The visitor’s device class is the one exception, and it is deliberate. It is resolved in the browser — the server’s copy of the page is cached and shared, so it cannot sniff a user agent for this — and it travels with each analytics event so that reporting can tell mobile from desktop. What reaches the table is one of three words, desktop, tablet or mobile, and nothing finer.

Telemetry

There is a “Share anonymous usage data” setting. It is off by default and only ever on if you switch it on. Version 1.0.0 ships no code that transmits usage data, so nothing is sent whether the box is ticked or not.

The plugin makes no other outbound request of its own: no update check of its own, no licence check, no CDN asset, and no font or script from a third-party host.

External services

The only third-party host this plugin can reach is Google Fonts, and only when
a campaign is set to use a Google font. See the “External services” section
above for what that sends and how to avoid it.

Leads are never transmitted. They are written to a table in your own database
and read back only by you.