FirstFiveMin

Each one shows only when it is set up in FirstFiveMin, with the same words and links as your corner button. One that is not set up shows nothing, never a button that does not work. You can place as many as you like on a page.

How it looks. Light, dark, or transparent (the form takes your site’s colours), a button colour, how round the corners are, the width, your site’s font or the form’s own, and which corner the button sits in. A button colour too light for white text is refused and the standard blue is used, so the button always stays readable. No choice changes the consent wording on the form. The same choices, with a live preview, are on the Get leads page in FirstFiveMin.

What it does not do. We think a site owner should be able to check this in about a minute, so there is not much to check:

• It makes no outbound request of its own — not on activation, not on save, not on a page view. The only thing that contacts FirstFiveMin is the form script, running in your visitor’s browser.
• It collects and stores no visitor data . No database table, no cookie, nothing read about the visitor.
• It registers no REST route and no AJAX handler . Its shortcode and its block print an empty placeholder that the form fills.
• It uses no eval , no obfuscation, and runs no code it fetches on your server.
• When you uninstall it, it deletes its options and leaves nothing behind.

One thing to set on the FirstFiveMin side. On the same Get leads page in FirstFiveMin, add your site under Allowed website domains , or leads from here are refused. That refusal is on purpose — it is what stops somebody else embedding your form on their site and filling your dashboard.

External services

This plugin shows the FirstFiveMin lead form, a service run by FirstFiveMin (https://firstfivemin.com/). Your server never contacts FirstFiveMin because of this plugin. Everything below happens in your visitor’s browser, on the pages where the form or the corner button shows. Like any web request, each one carries the visitor’s IP address and browser details.

• When the page loads: the browser loads the form script from https://firstfivemin.com/pages/widget/stl-widget.js (or the FirstFiveMin address you set) and asks FirstFiveMin for the form’s settings, sending your widget key and the page’s language. On a page where you placed any of your other ways to be reached, it asks for those too (which ones the page has), and draws them from the answer.
• When a visitor types a phone number and leaves that field: the number is sent to FirstFiveMin to check whether it is outside calling hours, so the form can offer a time for the call. It is not saved.
• Only if you are testing two versions of the form: the browser remembers, for that visit only (session storage), which version it showed; and when the visitor first clicks into the form, a count that the form was started is sent, with nothing the visitor typed.
• When a visitor submits the form: what they typed (their name, phone, email and the other fields shown) and their answer to the consent question on the form are sent to your FirstFiveMin account, together with your widget key.
• Why: so your FirstFiveMin account receives the lead and can reach them as the visitor agreed.
• FirstFiveMin terms of service: https://firstfivemin.com/terms
• FirstFiveMin privacy policy: https://firstfivemin.com/privacy

The form also uses Cloudflare Turnstile , a check that tells people apart from automated spam. When a visitor submits the form, the Turnstile check loads from https://challenges.cloudflare.com/ , and Cloudflare receives the browser and network details it needs for that check.

• Cloudflare Turnstile privacy addendum: https://www.cloudflare.com/turnstile-privacy-policy/
• Cloudflare terms of use: https://www.cloudflare.com/website-terms/

Privacy

This plugin stores four options in your WordPress database — your widget key, the FirstFiveMin address, “Show as”, and your look choices — and nothing else. It does not read or store any information about your visitors. Information your visitors type into the FirstFiveMin form goes to FirstFiveMin under the consent shown on that form; see https://firstfivemin.com/privacy and “External services” above.