Grow · Forms
Signup forms that record consent properly.
Signup forms that add people to the right topics, confirm them by double opt-in, and write a ledger entry for every yes, with the exact wording they agreed to. Hosted pages and embeds are coming.
01, Placement
ComingHosted, inline or pop-up.
Build the form once in the dashboard: its fields, its topics, its consent wording and what happens after someone signs up. Once hosted pages and embeds ship, share its page, place it in your site, or open it over a page.
- Fields: email, plus first name, last name or any contact property you have defined.
- After a signup: your own thank-you message, or a redirect to a page of yours.
Hosted page
A page of its own with a link you can share anywhere: a bio, a QR code on a shop counter, the footer of a receipt.
Inline embed
The form sits inside your own page, between your content, and posts straight to Refiremail.
Pop-up
The same form over your page, opened by the same script when you choose.
02, Double opt-in
Double opt-in, done carefully.
Nobody is subscribed until they confirm from their own inbox, and the confirmation is built so that machines cannot confirm for them.
- The link opens a page with a button, and only pressing it confirms. Mail scanners that open every link cannot subscribe anyone.
- Only a hash of each confirmation token is stored.
- Anything typed into the form is escaped in the confirmation email, so nobody can use your form to send a stranger their own words.
What happens, in order
Someone signs up
The contact is created as pending, so no campaign can reach it yet. The ledger records the grant and the notice shown.A confirmation email goes out
From your verified domain, with a link that works once and expires after 7 days.They press the button
The contact is subscribed, its topics are applied and the ledger records the confirmation.Or they never do
The link expires and the contact stays pending, so it gets no campaigns.
03, Consent
Consent with its context.
Each signup records the purpose, the version and exact wording of the notice shown, the form it came through and when. Withdrawing is as easy as signing up, and it is recorded the same way.
- Each form carries a notice version, so every signup points at the wording that person actually saw.
- A consent tick box is optional, and never ticked in advance.
- Ledger rows are added, never edited in place.
04, Existing contacts
Safe for the people already on your list.
A public form writes to the same records your product relies on, so it follows stricter rules than an import.
Nothing is overwritten
A signup fills in fields that were empty. It never replaces a name or a property your product already set.
No quiet re-subscribes
Someone who unsubscribed comes back only by confirming from their inbox, even on a form without double opt-in.
No list checking
The form answers the same way for new, existing and suppressed addresses, so nobody can use it to find out who is on your list.
05, Spam
Built to ignore bots.
Public forms attract junk. Quiet checks run before a submission is accepted, and none of them ask a real person to solve a puzzle unless you switch a challenge on.
A hidden field
A field people never see. Bots fill it in, and their posts are dropped.
A signed form token
Every served form carries a signed token. A post that arrives within two seconds, or more than a day later, is refused.
An optional challenge
Turn on a bot challenge for a form that draws heavy abuse. It is off until you need it.
Rate limits
Per visitor, per email address and per team, with a daily cap on confirmation emails to any one address.
Size limits
Each field is capped at 256 characters and a whole submission at 16 KB, whatever the browser sends.
Suppressed stays suppressed
A signup from an address that bounced or complained sends no email, and the form answers as it would for anyone.
06, After signup
A signup can start something.
Once confirmed, a signup opts people into the form’s topics. A signup can also start a journey, so the welcome series begins without glue code.
- Form · Newsletter
- Topic · New arrivals
- Segment · Newsletter signups
- Journey · Welcome
For the email your team writes, on the same contacts.
Broadcasts
Visual editor, A/B tests, reports
Automations
Journeys that respond to events
Audiences
Contacts, topics, segments, consent
Publish your first form.
Double opt-in is already on. Write your consent wording and share the link.