Popupsmart

Overview

Popupsmart is a no-code popup builder that helps websites capture leads, promote offers, reduce cart abandonment, and drive specific visitor actions through targeted overlay campaigns. The platform delivers exit-intent popups, scroll-triggered promotions, timed overlays, fullscreen welcome mats, cookie bar notices, and embedded inline forms. Campaigns can be targeted by visitor attributes — traffic source, device type, geographic location, referrer URL, and behavioral triggers. Popupsmart is used by e-commerce stores, SaaS companies, publishers, and marketing teams as a conversion rate optimization tool.

What This Script Does

Popupsmart's embed script loads on the host website and begins behavioral monitoring and campaign orchestration:

Script initialization:

• Loads the Popupsmart SDK (cdn.popupsmart.com/bundle.js or a site-specific variant) which contains the campaign targeting engine, behavioral monitoring module, and popup rendering library
• Fetches the site's active campaign configurations from Popupsmart's servers on page load, determining which popups are active and what their trigger and targeting rules are

Behavioral monitoring:

• Monitors cursor movement and detects exit intent when the cursor moves rapidly toward the browser UI controls
• Tracks scroll position continuously to trigger scroll-depth-based campaigns (e.g., show popup after 50% scroll)
• Measures time elapsed on page for time-delay triggers
• Detects page count within a session for campaigns targeting visitors who have viewed multiple pages

Popup rendering:

• Displays overlay modals, slide-in panels, top/bottom floating bars, and fullscreen overlays matching the configured campaign designs
• Loads creative assets (images, fonts, button styles) from Popupsmart's CDN
• Renders countdown timers (real-time or deadline-based) within campaign creatives

Visitor tracking cookies:

• Sets ps_session_[site_id] (first-party, session cookie) — tracks which campaigns have been triggered during the current visit to prevent repeated display within a session
• Sets ps_visitor_[site_id] (first-party, persistent, 30-day expiry) — records a visitor's campaign interaction history across visits: which popups were shown, dismissed, or converted, and when
• Sets ps_ab_[campaign_id] (first-party, persistent) — stores A/B test variant assignment for campaign split tests

Lead capture and data transmission:

• Email and phone number capture forms within popups POST submitted data to Popupsmart's servers
• Popupsmart relays captured contact data to connected marketing tools via native integrations (Mailchimp, Klaviyo, ConvertKit, ActiveCampaign, HubSpot, Zapier webhooks) and through its own lead database accessible in the Popupsmart dashboard
• Coupon code delivery happens through the popup interface, with code values stored and served by Popupsmart's platform

Campaign performance tracking:

• Records popup impression counts, interaction events (form submissions, button clicks, close actions), and conversion rates per campaign for the Popupsmart analytics dashboard

Consent & Compliance

• Category: Marketing
• GDPR: Requires explicit consent. Popupsmart's behavioral monitoring (cursor tracking, scroll tracking, time-on-page), persistent visitor identification across sessions, and A/B test cookies all constitute personal data processing for marketing purposes under GDPR and the ePrivacy Directive. None of these functions are necessary for any service the visitor requested.
• ePrivacy Directive: The ps_visitor_[site_id] persistent cookie and all behavioral monitoring scripts serve the site operator's marketing optimization goals. Consent is required before the script loads.
• CCPA/CPRA: Behavioral tracking data and captured contact information (email, phone) constitute personal information. Popupsmart's data flows to third-party marketing platforms through integrations, which may constitute "sharing" under CPRA. Must honor Global Privacy Control opt-out signals.
• Lead data: Email addresses and phone numbers submitted through popups are personal data collected for direct marketing. Explicit consent at the point of form submission is required under GDPR for email marketing. SMS marketing has additional consent requirements.
• Popupsmart is a Turkish company: Turkey has its own data protection law (KVKK), broadly aligned with GDPR. EU-Turkey data transfers require Standard Contractual Clauses as Turkey does not have an EU adequacy decision.

Should You Block This Without Consent?

Yes. Popupsmart's scripts are marketing tools. The behavioral monitoring, visitor tracking, popup campaign delivery, and lead capture all serve marketing conversion goals with no functional benefit to the visitor. Block all Popupsmart scripts until explicit marketing consent is granted.