WordPress plugins by hafenstudios

Seven plugins.
One fleet:
simply take off.
Plugins that bring customers
on board.

From links to memberships and ads to forms, CRM and spam protection: the hafenstudios fleet does every job really well – lean, secure and entirely in your hands. No SaaS lock-in, no tracking, full REST-API.

Open source (GPL) GDPR-friendly Data-minimal Made in Germany
One fleet, one language: Open source REST-API in every plugin GDPR-friendly No external call AI-ready 6 languages
The hafenstudios fleet

A toolkit for your website

Seven specialized plugins instead of one bloated do-it-all. Combine them freely, yet each one runs perfectly on its own.

Links

Linkjet

Redirects and affiliate links with click stats, QR codes, a 404 monitor and a complete REST-API.

  • Pretty short links on your own domain
  • 301/302/307/308/410 & link cloaking
  • Click stats, anonymized (GDPR)
  • Import from Pretty Links & Redirection
Learn more 100% free
Membership

MemberJet

Membership areas and online courses with native Digistore24 integration, AI course tools with live progress and security built in from the ground up. In six languages.

  • Digistore24 webhooks with SHA-512 verification
  • Courses, modules, drip content & progress
  • AI course generator (Claude, your own key)
  • Magic-link login, fail-closed access
Learn more Self-hosted
Ads

Adjet

Place and control ads and AdSense blocks: auto-placement, targeting, consent gating and local stats.

  • Auto-placement, shortcode, block & widget
  • AdSense assistant & weighted rotation
  • Device & content targeting, consent
  • Local stats, no external call
Learn more Open source
Forms

Leadlotse

A form builder that thinks from the goal: purpose templates instead of an empty toolkit, a tidy inbox in WordPress and event sign-ups with tickets and QR check-in.

  • Purpose templates with fields, privacy text & confirmation email
  • Tidy inbox with status – Hans flags overdue requests
  • Event sign-up: ticket, QR check-in, Excel export
  • Double opt-in, conditional logic, honeypot spam protection
Learn more GDPR-first
Marketing CRM

Kurato

Marketing CRM for WordPress: it looks after every lead until it becomes a customer. Contacts, sales pipeline, newsletter with double opt-in and appointment booking – GDPR-first on your own server.

  • Contacts, tags & segments in one place
  • Sales pipeline as a Kanban board
  • Newsletter with double opt-in & preference center
  • Appointment booking with slots, ICS & reminders
Learn more Self-hosted
Anti-spam

Wellenbrecher

Local-first anti-spam for comments, forms, registrations and WooCommerce: one score engine, every channel, no cloud and no DPA.

  • Every channel in one plugin instead of three
  • Zero external requests by default (GDPR)
  • Invisible: honeypot & time trap instead of a captcha
  • Observation mode, then switch it live
Learn more Local-first
Multilingual

Wimpel

Multilingual without magic: translations are ordinary posts and pages. Plus a market assistant that opens a new language in one click, honest cost estimate included.

  • No rewrite rules, no proxy, no word rental
  • hreflang engine & language switcher without dead links
  • AI translation with your own key, always as a draft
  • Market and context notes per target country
WordPress.org The carrier ship

Hafen: the AI-native WordPress theme

Schema, llms.txt and answer-engine blocks out of the box – the foundation that carries the fleet's plugins and makes your content visible to Google and AI. Now free in the official WordPress directory.

Free on WordPress.org What Hafen does
Schema Lighthouse 100 GDPR-first
Linkjet · v1.3.1

Redirects & affiliate links, REST-ready.

The lean, fully documented successor to Pretty Links and Redirection – no paywall, no external servers.

  • Short links & cloakingYour own /go/ links with rel="nofollow"/"sponsored" and parameter pass-through.
  • Click stats & timelineDevices, browsers and countries – IP-anonymized, bot filter, no external GeoIP.
  • QR code & 404 monitorQR generated locally in the browser; turn dead URLs into redirects with a single click.
  • Complete REST-API/wp-json/linkjet/v1/ including an OpenAPI manifest – ideal for automation & AI.
Linkjet · All links
/go/webhostingziel.de/partner?ref=… · 301Affiliate1.284
/go/newsletterlanding/signup · 302Internal742
/go/flyer-qrQR active · 307Print318
MemberJet · v1.0

Membership areas, secure from the ground up.

WordPress becomes a complete membership and course platform. Purchases unlock access, refunds lock it reliably, and the AI builds entire courses alongside you while you watch. All on your own server, in your hands.

  • Native Digistore24 integrationIPN with SHA-512 signature, idempotent; unlock on purchase, lock on refund – automatically.
  • Modern learning UXModules, drip content, progress bars, quizzes, community and a membership area via shortcode.
  • AI course tools (Claude, BYOK)Generate courses, lessons & quizzes, entire courses in batches with live progress; plus a tutor that answers only from your own content.
  • Secure & multilingualSecrets encrypted with libsodium, access fail-closed; interface in DE, EN, FR, ES, IT, NL.
MemberJet · Create course
AI is creating the course draft …Lesson 7 of 12 · Modules & quizzesClaude
Module 1 · Fundamentals4 lessons · Drip activeunlocked
Module 2 · Deep diveunlocks after purchaseD24
Adjet · v1.6

Your ad cockpit for WordPress.

Place ads faster, control them cleanly and analyze them more clearly – privacy-conscious and without a single external call back to us.

  • Auto-placement & targetingBefore/after content, after paragraph N or the first image; device, post-type and term targeting.
  • AdSense assistantPublisher and slot ID for responsive units, optional Auto-Ads – plus weighted rotation.
  • Consent & lazy-loadConsent-cookie gating for common tools, lazy-load via IntersectionObserver.
  • Local stats & REST-API30-day chart as pure SVG, data stays in your DB; REST under adjet/v1.
Adjet · Stats (30 days)
Header · LeaderboardAuto-placement · Desktopactive
In-Content · AdSenseafter paragraph 3 · responsive3,1 %
Leadlotse · v1.2.0

Brings every request safely into the harbor.

The form builder that thinks from the goal: you don't pick an empty toolkit, you pick a purpose – and within minutes you have a form that already brings its fields, privacy text and confirmation email. Every request lands tidily in WordPress; nothing slips through.

  • Purpose templates instead of an empty toolkitContact, consultation, enquiry, newsletter, download, callback, quote or event – each template comes with sensible fields, a privacy text and a confirmation email.
  • Tidy inbox in WordPressEvery request gets a status (New, In progress, Done). Hans, the pilot, speaks up when requests wait too long. CSV export included.
  • Event sign-ups with a ticketA ticket email with a QR code, check-in by scan, a capacity limit with sold out and an Excel export of the attendee list – all without any external service.
  • Protection, comfort and full data ownershipDouble opt-in, conditional fields and honeypot spam protection without a captcha. Plus WhatsApp leads and the Continue with Google/Apple fill-in helper.
Leadlotse · Requests inbox
New contact request3 minutes ago · Purpose: consultationNew
Quote requestedcallback wanted · reply pendingIn progress
Event sign-upTicket #A-241 · QR validchecked in
Kurato · v1.1.0

Looks after every lead until it becomes a customer.

The marketing CRM for WordPress: contacts, sales pipeline, newsletter and appointment booking in one place. GDPR-first and with full data ownership – everything runs on your own server, no SaaS in between.

  • Contacts, tags & segmentsAll your leads and customers in one place, neatly tagged and sorted into segments – the basis for targeted outreach.
  • Sales pipeline as KanbanDrag deals through your stages and always see which lead is up next. Nothing falls through the cracks.
  • Newsletter done rightDouble opt-in, unsubscribe and a preference center included. Send via the provider of your choice: Brevo, Postmark, Mailgun, SMTP2GO, SES or SMTP.
  • Appointment booking with booking pagesA dedicated booking page per contact person with free slots, an ICS calendar entry, reminder and cancellation – appointments without the back-and-forth.

Kurato Cockpit: A team workspace in the cloud – your CRM in the cloud, your data on your own server. kurato.cloud

Kurato · Pipeline
New contact · Lea M.Source: Leadlotse · Tag: WebinarNew
Deal · Website relaunchStage: Quote · €2,400active
Newsletter · JulyDouble opt-in · 1,284 contactsDOI
Wellenbrecher · v1.0

Breaks the spam wave before it reaches the harbour.

Local-first anti-spam for comments, forms, registrations and WooCommerce. No cloud, no data leaving your site, no DPA needed: the entire assessment runs on your own server. One plugin instead of three.

  • Every channel, one shieldComments, registrations, forms (natively with Leadlotse) and WooCommerce reviews: one score engine with 30 checks instead of three separate tools.
  • Local-first & GDPR by defaultNo external services by default, IP addresses only as a rotating check value, automatic deletion deadlines. No DPA, no third-country transfer.
  • Invisible to real visitorsNo captcha, no puzzles: honeypot, time trap and behavioral signals work in the background. First 7 days in observation mode, then it goes live.
  • Quarantine instead of data lossEdge cases land in the review pool instead of the void: one click restores genuine requests, including emails and CRM handover.
Wellenbrecher · Overview
Spam wave broken42 blocks today · 0 false hitsScore 96
Quarantine · 3 requestswaiting for your reviewreview
Observation mode2 days left, then liveactive
Wimpel · v1.0

Multilingual without magic. Every flag a market.

In Wimpel a translation is an ordinary post with its own permalink. No rewrite rules, no front-end proxy, no word rental. And if you want it, the market assistant opens a new language in one click: scan, cost estimate, confirmation, run.

  • Robust instead of magicalTranslations are ordinary posts and pages, connected through post meta. Your permalinks stay untouched, and after an uninstall all content remains.
  • hreflang and a switcher that behaveBidirectional, with x-default and self-reference, only from two published translations onwards. The switcher falls back to the language home page instead of into the void.
  • Honest costs before you startWords, estimated price, upper bound. Only then the confirmation. No run exceeds the confirmed budget, and the AI runs through your own provider account.
  • A language is a marketAfter translating, Wimpel asks questions about the target country: right of withdrawal, price statements, mandatory disclosures, units. Notes with a disclaimer, never an automatic rewrite.
Wimpel · Market assistant
Open the English market38 posts · 41,200 words foundScan
Estimated costapprox. 1.60 € · upper bound 2.40 €confirm
34 drafts created3 market notes are waiting for your reviewreview
In development

Already on the horizon

One more fleet plugin is in the works. No download yet, but an honest look at what sets sail next.

Heckgalerie in development

Galleries, logo bars and sliders: image showcases for your website's shop window – lean and with no third-party dependencies.

Why hafenstudios

Tools you can trust

Every plugin follows the same principles: focused, open and respectful of your data.

Open source

GPLv2, transparent code and no hidden paywalls. What you see is what runs.

Security by design

Signature verification, nonces, real capability checks and encrypted secrets – not bolted on, but built in.

GDPR & no tracking

Stats stay local in your WordPress database. No data sent to hafenstudios, no external call.

REST-API & AI-ready

Every plugin ships with a documented REST-API – perfect for automation and AI-powered workflows.

The whole fleet at a glance

From the field

Websites running on hafenstudios

Selected client projects built on our plugins, and soon on the Hafen theme.

More client projects are on the way.

Ready for your next launch?

Tell us which plugin you need – or whether it should be the whole fleet. We'll get back to you personally.