SubsVault Email Subscribers
A simple, self-hosted WordPress newsletter signup plugin. Free.
Collect email addresses on your WordPress site. Store them in your own database. Send double opt-in confirmations. Give every subscriber a working one-click unsubscribe link. Export the list any time.
No third-party service. No monthly fee. No data leaves your server.
Requires WordPress 5.8 or higher. Requires PHP 7.4 or higher. Free under GPLv2.
Why we built it
Most WordPress newsletter plugins push you into a paid subscription the moment your list grows past 500 people. The rest look untouched since 2014. SubsVault is the plugin we wanted for our own client sites. Clean admin, real GDPR compliance, and a public signup page you can share on socials, print, or email.
Three ways to collect signups
Way one. Plug it into a form you already have.
If your theme already renders a newsletter form, attach SubsVault by adding a class or a data attribute to the form tag. No form rewriting, no plugin edits. Works with any theme, page builder, or custom code. Ideal for developers and agencies with a house theme.
Way two. Drop in a ready-made shortcode.
Two styles are built in. Inline for sidebars and footers, or a boxed card with a heading and description for featured content sections. Paste the shortcode anywhere shortcodes work: pages, posts, blocks, text widgets, or the text field inside any page builder.
Way three. Share your own signup page.
Enable a public URL, for example yoursite.com/subscribe/. It renders a standalone signup page with your logo, your headline, your body text, and your brand colors. No theme header or footer. Mobile-first. Perfect for social bio links, QR codes on print material, and email signatures.
Signup and confirmation
Double opt-in confirmation email with a signed activation link.
One-click unsubscribe URL, which GDPR requires on outgoing email.
Consent checkbox with stored consent text and timestamp.
Source URL tracking so you know where each subscriber came from.
Spam protection
Honeypot field that catches bots without CAPTCHAs.
Disposable email blocklist with over forty throwaway domains, extendable from the settings page.
Rate limiting per IP and per email domain, both fully configurable.
All the WordPress security fundamentals: nonces, prepared queries, output escaping.
Admin experience
Modern subscribers list with filter tabs, live search, and bulk delete.
Dashboard widget with active, pending, and weekly subscriber counts.
CSV export with consent text, source URL, and confirmation timestamps.
Settings organized in four tabs: General, Theme Integration, Shortcodes, Shareable Page.
Third-party admin nag notices hidden on SubsVault pages so you can focus.
GDPR
Registered personal-data exporter and eraser. Works with the built-in WordPress Tools, Personal Data feature.
Privacy policy snippet you can drop into your policy page.
Consent audit trail per subscriber.
Developer friendly
REST endpoint at wp-json/subsvault/v1/subscribe for custom integrations.
Filter and action hooks for every step of the signup lifecycle.
Vanilla JavaScript. No jQuery dependency.
Conditional enqueue so the script only loads on pages that actually render a form.
Full internationalization coverage.
How it works
Install SubsVault from the WordPress.org plugin directory.
Add a form to your site with a shortcode, or attach SubsVault to an existing form with one class name.
New subscribers land in your Subscribers list, gated behind an email confirmation link if you enable double opt-in.
Export the list any time, or pipe it to your own email service using the REST endpoint and action hooks.
Setup takes under two minutes.
Who it is for
Site owners who want an in-house subscriber list instead of paying a monthly SaaS fee.
Agencies who need one consistent signup plugin across every client site.
Developers who want a signup form that binds to their existing theme markup.
Anyone who needs a GDPR-clean workflow without hiring a lawyer.
Frequently asked questions
Does the plugin send newsletters?
No. SubsVault collects and stores subscribers only. It sends the confirmation email and the unsubscribe email, nothing else. Pair it with your own SMTP setup and send campaigns through your preferred email tool.
Does it work with Elementor, Divi, or WPBakery?
Yes. Paste the shortcode inside any text or shortcode widget in your page builder.
Does it work with Contact Form 7 or Gravity Forms?
Not directly. Those plugins run their own submission handlers. SubsVault attaches to standard HTML forms.
Can I export my subscribers?
Yes. Click Export CSV in the Subscribers admin page for a full download at any time.
Is it GDPR compliant?
The plugin ships the ingredients: consent capture, unsubscribe URL, and hooks into the built-in WordPress Personal Data exporter and eraser. Full compliance also depends on your privacy notice and how you use the data, which is your responsibility.
Can I customize the confirmation email?
Yes. Subject line, body text, from name, and from address are all in Settings, General, Confirmation Email. You can use placeholders for the confirmation URL, site name, site URL, and subscriber email.
Will it slow down my site?
No. The frontend script only loads on pages that render a form. Vanilla JavaScript, no jQuery, and under four kilobytes gzipped.
Is it really free?
Yes. Released under GPLv2 or later. No paid tier and no upsells inside the admin.
Pricing
Free forever. GPLv2 or later.
If you need custom integrations, custom theme integration, or private support, we do consulting work at InDesign Media. Contact us for a quote.
Support
Bugs and feature requests go through the WordPress.org support forum for the plugin.
Custom development and priority support are available through InDesign Media.
Built-in docs live inside the plugin under the Theme Integration and Shortcodes tabs of the settings page.
About the author
InDesign Media builds WordPress plugins and websites focused on speed, clarity, and self-hosted independence. Learn more at indesignmedia.net.
