Ultimate Form – Multi-Step Form Builder, Conversion Analytics & Lead Forms vs Flinkform – GDPR Contact Forms for the Block Editor

Flinkform is a form builder that lives entirely inside the WordPress Block Editor. Forms are composed from native blocks (block.json v3), styled through theme.json design tokens, and powered by the Interactivity API — no separate form builder UI, no shortcodes, no jQuery, under 15 KB of frontend JavaScript (gzipped). Built in Germany for GDPR-first websites. Das deutschsprachige Kontaktformular-Plugin für den Block-Editor. Try it before you install it: live demo forms, including multi-step and conditional logic, at https://demo.flinkform.de/ GDPR by design No IP logging, no user-agent logging, no tracking, no external services in the free core. Spam protection runs on a honeypot, a signed timing check and a proof-of-work challenge with a no-JavaScript maths fallback — no reCAPTCHA, no hCaptcha, no Cloudflare Turnstile, and therefore no data transfer to US servers. Includes a consent field, retention periods with automatic deletion and integration with the WordPress privacy tools. Free, not a trial Multi-step forms and conditional logic are in the free core, not behind a paywall: Multi-step forms with progress indicator and per-step validation Conditional logic for fields, steps, skipping steps and gating the submit button 14 field types including a dedicated consent field Submissions dashboard inside WordPress with search, filters and read state Email notifications with merge tags, plus an optional confirmation mail Automatic theme.json styling — forms match your theme without extra CSS Built for accessibility: the rendered markup passes axe-core against WCAG 2.1 A/AA with zero violations Flinkform Pro The optional Pro add-on adds Stripe payments (card, SEPA direct debit, Apple Pay, Google Pay — whichever methods you enable in Stripe), calculation fields, multi-file upload, SMTP delivery, webhooks, newsletter integrations, CSV export and custom CSS. Details and pricing: https://flinkform.de/pro Requirements WordPress 6.5 or newer, PHP 8.1 or newer, Block Editor (Gutenberg). How it works Block Editor native — forms are built with block.json and the Interactivity API, directly inside the editor theme.json styling — forms inherit your theme’s typography, colours and spacing automatically Modern stack — WordPress 6.5+, PHP 8.1+, no jQuery, frontend JS under 15 KB gzipped Multi-step forms — split long forms into steps with a Page Break block, included in the free core Conditional logic — show/hide fields based on user input, included in the free core Accessible by default — full keyboard navigation, screen-reader compatible, aria-live announcements Privacy by design — no external services, no tracking cookies, no IP tracking — everything stays on your server Features (free core) Form building * 14 field types: Text, Email, Textarea, Number, Date, URL, Phone, Select, Radio, Checkbox, Toggle, Hidden, Consent, Address * Composite Address field: street, postal code and city in a compact grid, with optional address line 2 and country * Dedicated Consent field for privacy-policy agreement * Notice block: a highlighted note between fields (info, success, warning, important) — pair it with conditional logic to surface guidance only when it applies * Section Heading and Page Break blocks for structuring longer forms * Multi-step forms with Page Break block, per-step validation and progress indicator (bar, dots or numbers) * Conditional logic — show/hide fields, skip steps, gate the submit button, with nestable groups for “(A or B) and C” * Two-column layout with per-field full-width override Styling * Automatic theme.json inheritance (colours, typography, spacing, border radius) * Style panel: primary colour, field style (bordered/soft/underline/minimal), label position (above/beside/floating/placeholder), submit button style (fill/outline/ghost), plus colour pickers for labels and help/consent text — and the Section Heading block carries WordPress’s native text-colour option Accessibility * Built accessible: real label/for pairs, fieldset/legend for choice groups, errors announced via role=”alert” and linked with aria-describedby, focus moves to the first invalid field * Multi-step navigation announces the new step via aria-live and manages focus; the progress indicator is a real progressbar with current values * Visible focus rings even when the theme removes them, prefers-reduced-motion respected, and the spam protection needs no CAPTCHA — nothing to squint at, nothing to solve * Works fully without JavaScript, and the form markup passes axe-core (WCAG 2.1 A/AA) with zero violations — including the error state Notifications * Admin notification email on every submission (configurable recipient, merge tags) * Optional confirmation email to the submitter * Sender name and address per form, with a Reply-To for each email — send from your own address without an SMTP plugin * Sends through your site’s standard WordPress mail (wp_mail) Spam protection * Always-on honeypot + signed time-based check (zero configuration) * Built-in proof-of-work challenge with accessible math fallback for visitors without JavaScript * No external service, no API keys, no tracking cookies, 100% GDPR-friendly After submission * Success message or redirect to a custom thank-you URL (with open-redirect protection) * Optional submission ID and form ID query parameters for conversion tracking (GA4, Meta Pixel, Plausible, etc.) Admin * Submissions list with search, filter by form, sort, bulk actions * Single-submission detail view with all field labels and values * Mark as read/unread * Per-form data retention with automatic daily purge Privacy Flinkform is built with privacy by default. Here is what the free core does and does not do: What the free core stores: * Form submissions (the field values visitors enter) in a dedicated database table ({prefix}flinkform_submissions) What the free core does NOT do: * It stores no IP addresses and no browser user-agent strings * It sets no tracking, analytics or marketing cookies. Flinkform sets exactly one strictly-necessary cookie — flinkform_flash (lifetime ~60 seconds, httpOnly) — and only when a form submission fails validation, to carry the error message and the visitor’s input across the page reload. Successful submissions set no cookie at all * It contacts no external service Data retention: * By default, submissions are retained until you delete them. To comply with the storage-limitation principle (GDPR Art. 5), set a per-form retention period (Form block → Data Retention) and Flinkform deletes older submissions automatically each day * Individual submissions can be deleted from the admin submissions screen at any time Data deletion: * All free-core data (the submissions table) is permanently removed when the plugin is uninstalled through the WordPress admin * Flinkform integrates with WordPress’s privacy tools (Tools > Export Personal Data / Erase Personal Data) to support data-subject access and erasure requests Source Code The complete, uncompiled source code (including the src/ directory with the unminified JavaScript/CSS that compiles into build/) is publicly available at: https://github.com/dennisbuchwald/Flinkform Build instructions (Node.js 18+ and npm required): 1. Clone the repository: git clone https://github.com/dennisbuchwald/Flinkform.git 2. Install dependencies: npm install 3. Build the compiled assets into build/: npm run build The build is powered by @wordpress/scripts (webpack). The src/ sources are excluded from the distributed plugin zip to keep it small; this repository is the canonical, reviewable source.

Ultimate Form is a powerful, free form builder for WordPress — and the only one with a built-in, privacy-first conversion dashboard that shows you exactly where visitors drop off, so you can fix the steps and fields that cost you leads. Build multi-step funnels, add conditional logic, collect file uploads, send email notifications and manage every submission — all from one plugin with no limit on the number of forms, fields or entries. No cookies, no account, no upsell wall around the basics. Why Ultimate Form? It’s genuinely unlimited — unlimited forms, steps, fields and submissions in the free version. You can see what’s working — most form plugins collect entries; Ultimate Form also tells you your conversion rate, your funnel and your worst-performing fields, with zero personal data. It looks good out of the box — a clean, modern form with floating labels, a clear focus ring and a consistent brand colour system across the whole plugin. It respects privacy by design — hashed entry IPs (salted SHA-256), cookieless analytics with no IP at all, Do-Not-Track support and a consent-checkbox generator. Key Features Drag & Drop Builder with 25+ field types (text, email, phone, textarea, select, radio, checkbox, multi-select, date/time, number, currency, URL, password, rating, range slider, color, file upload, multiple files, name, address, ZIP lookup, repeater, calculator, CAPTCHA, …) Multi-Step Forms with a configurable progress bar and step navigation Form Analytics — privacy-first conversion dashboard: views, start & conversion rate, step funnel, step-abandonment, field drop-off, validation hotspots, device & traffic source — no cookies, no IP addresses, aggregated data only Conditional Logic — show/hide fields and steps based on previous answers File Uploads — single and multiple file fields with type and size validation; uploads appear as download links in each entry Email Notifications — per-form templates for customer, admin and custom recipients Design Configurator — live preview for colours, typography, spacing and logo Entries Management — view, search, filter, star, paginate and export submissions as CSV Save & Continue — visitors can resume a long form where they left off Webhook Integration — send form data to any external URL via HTTP POST Honeypot Spam Protection — invisible spam protection on every form GDPR Compliant — hashed entry IPs, cookieless analytics with no IP, consent-checkbox generator, optional Strict GDPR mode Translation Ready — every user-facing string is translatable Shortcode Embed — [ultimate_form id="X"] works with any theme or page builder Elementor Widget — a dedicated widget to drop any form straight into your Elementor layouts Iframe Embed — embed a form on external, non-WordPress websites with a ready-to-paste iframe snippet Conversion Tracking — fire dataLayer / Meta Pixel events on successful submission for Google Tag Manager (Google Ads & custom events in Pro) Need More? Ultimate Form Pro adds powerful features for businesses: Stripe & PayPal payment processing WooCommerce integration CRM integration (Brevo, HubSpot, ActiveCampaign, Pipedrive, Salesforce, Mailchimp) Native PDF generation from submissions Telegram, Discord & Slack notifications Zapier / Make automation Form cloning, A/B testing, submission limits GDPR data export & erasure tools Signature field Priority support Get Ultimate Form Pro External Services This plugin does not communicate with any external service by default. All form submissions are stored locally in your WordPress database. The following optional features may connect to a third-party service, but only when explicitly enabled and configured by the site administrator: 1. Webhook Addon (Generic HTTP POST) What it does: Forwards form submission data to an arbitrary URL that the administrator configures inside the plugin settings (Settings → Addons → Webhook). When data is sent: Only when (a) the Webhook addon is enabled, (b) a valid URL is provided by the administrator, and (c) a form submission is received that is mapped to the webhook. What data is sent: The serialized form submission (form ID, submitted field values, submission ID, timestamp). The complete payload is the data the administrator configured the form to collect. Where it is sent: The endpoint URL is entirely controlled by the administrator. The plugin does not ship with a pre-configured destination. There is no Ultimate Form vendor server involved at any point. Service provider: N/A — the destination is user-configured. The administrator is responsible for ensuring that the receiving endpoint complies with their privacy policy and applicable law. 2. Plugin Support Form (delta-web-solution.de) What it does: The plugin Help page contains a contact form that, when submitted by an administrator, sends an email to [email protected] (the plugin vendor) using the WordPress wp_mail() function. When data is sent: Only when the administrator clicks “Send” on the Help page support form. What data is sent: The message text and reply-to email address typed by the administrator. In addition, the plugin version, WordPress version and site URL are automatically included with every support request to help diagnose the issue. Where it is sent: Routed via the local WordPress wp_mail() mailer to [email protected]. No third-party API is involved. Service provider: Delta Web Solution (the plugin author). Website: https://delta-web-solution.de Terms of Use: https://delta-web-solution.de/agb Privacy Policy: https://delta-web-solution.de/datenschutz Note on the free version The free Ultimate Form plugin does not contain any license server, telemetry, analytics or “phone home” code. All feature-detection happens locally inside the plugin code. There is no upgrade or activation check that contacts a remote server.