ambera Theme Builder

Description

Build the whole website with one visual builder — and hand it over without handing over WordPress.

ambera Theme Builder is a page builder and a theme builder in one plugin — and the only one that gives your client a back end of their own. They run the site at /themebuilder/admin/, in plain words, with your logo on top, and never see wp-admin, a plugin list or an update notice. Forms, media, SEO, statistics, security and speed are built in. No Elementor, no stack of add-ons, and no visitor of yours ever makes a request to somebody else’s server.

Unlock the shop, memberships, courses, appointments, the newsletter, thirty languages and everything else with ambera Pro.

Build professional websites

• Visual builder. Drag blocks onto the page, style them in a design panel, and see the result at once — on desktop, tablet and phone in the same window.
• A back end your client can use. Pages, blog, messages, media, forms and statistics in plain words — and no wp-admin behind it.
• Complete theme builder. Header, footer, single posts, archives, search and 404 are built in the same editor, with conditions that say where each one applies.
• 88 blocks, 50 of them free. Layout, text, media, menus, blog, forms — and with Pro a shop, memberships, appointments, carousels, tabs, timelines and more.
• A design system, not a stylesheet. Colours, fonts, spacing and text styles are set once and used everywhere. Change one, and the whole site follows.
• Work on a page that is already online. Saving keeps a draft; you publish when it suits, now or at a time you set. Two versions side by side, with what changed marked in green, red and orange.

Give clients their own back end

In the editor, a role can be allowed to change words and pictures without being able to move a block.

That makes ambera useful for agencies and freelancers — not only while the website is being built, but for the years after it is handed over.

Key features

Everything marked [Pro] is in the separate Pro plugin. Nothing in this free plugin is locked or greyed out.

• Page builder: blocks, a design panel, three screen widths, a layer tree, undo and versions.
• Theme builder: header and footer in the free plugin; post, archive, search, 404 and menu templates with Pro.
• Client area: pages, blog, messages, media, forms, statistics, tasks and users — in plain words, with your logo on top.
• Access control: per role and per area — see and change, see only, or hidden — down to publishing, deleting and changing an address, and rules for a single page.
• Forms and inbox: contact, booking and application forms, an inbox with every field, and a log of every mail the site has sent.
• Media manager: folders, search, cropping, alternative texts — and WebP and AVIF in every size, served to the screen that asked.
• SEO: titles, descriptions, sitemap, structured data, and a ring on every page that says in per cent what is missing.
• Statistics: visitors, pages, referrers, devices and countries — counted on your own server, without a cookie and without a third party.
• Security: a firewall in front of every request, a counted sign-in, two-factor authentication with a passkey or an app, hardening, a file scan and a log.
• Spam protection: five checks under every form, comment and sign-up — a hidden field, a signed clock, a brake per address, a limit on links and a word list of your own. No captcha, nothing from Google, no cookie.
• Speed: finished pages kept as files, images in WebP and AVIF, fonts served from your own site. No caching plugin to configure.
• Tasks and reminders: what has to be done, with a day and a time, and a notice in the client area when it is due.
• Redirects and 404 list: rules from an old address to a new one, and what visitors asked for and did not get, with one click to turn it into a rule.
• Maintenance mode: a switch that closes the site behind a page you designed, while anybody who may edit still sees the real thing.
• Accessibility: a button visitors use to set the page up for their own eyes — larger text, more contrast, underlined links, no motion. Nothing loaded from anyone else.
• Shop [Pro]: products with variants, stock and categories, a cart, a checkout, orders, six emails, invoices and credit notes — Stripe, Payrexx with TWINT, PayPal or on invoice.
• Memberships and courses [Pro]: sell access monthly, yearly, once or for good; lock a page, a category, a single block or a file; courses with lessons, a quiz and points.
• Appointments [Pro]: visitors book a free time themselves — services with a duration and a break, people with their own hours and days off, confirmation and cancellation by email, without an account.
• Legal pages [Pro]: an imprint and a privacy policy written from what the site actually does — which modules are on, which services have a key, what stands on the pages. The policy follows the GDPR, so it fits anywhere in the EU and the EEA; the imprint knows what Switzerland, Germany and Austria ask for on top.
• Newsletter [Pro]: written with the same blocks as a page, sent from the site itself, with lists, double opt-in, sending in batches, opens and clicks.
• Thirty languages [Pro]: /fr/contact is a real page — translated on first view, then stored, with hreflang and findable in search. Correct a sentence by hand and the correction survives.
• Custom fields [Pro]: sets of fields per kind of post, written into a template by the “Custom field” block.
• AI assistance [Pro]: describe a section and get it as blocks, write a whole page from a sentence, shorten a text, generate a picture — with your own key at OpenAI or Anthropic.
• AI tools over MCP [Pro]: Claude, Cursor or Codex build pages here as real blocks on the same tree the editor uses, through one key you hand out and take back.
• Backups [Pro]: the whole site in one file, now or on a plan, full or incremental, checked after every run, restored with one click.
• Snippets [Pro]: a font import, a schema, a rule a client insists on — as a snippet with a name, a place and a condition, instead of another plugin.
• Early firewall [Pro]: the rules load before WordPress does, for every file of the site.
• Country blocking [Pro]: whole countries allowed or turned away, with a preset of the usual suspects to start from.

The 50 free blocks

Layout: Page, Section, Grid, Column, Flex row, Group, Spacer, Divider, Off canvas, Loop carousel.

Text and buttons: Heading, Text, List, Quote, Button, Icon, Icon card, Shortcode.

Media: Image, Gallery, Video, Slider, Slide, Flip box.

People and proof: Team, Person, Reviews, Review, Portfolio, Share buttons, Profiles, PayPal button.

The site around the page: Site name, Logo, Menu, Menu entry, Link list, Breadcrumbs, Sitemap, Search, Results, Light and dark, Currency switch.

Blog: Post title, Post image, Post details, Post content, Post list.

Forms: Form, Field.

Pro features

Pro is a separate plugin for professional, multilingual and commercial websites. It adds eleven modules and 38 blocks to the same editor.

Pro modules

• Shop: products, variants, stock, categories, CSV import, cart, checkout, orders with their state, six customer emails with a designer, invoices and credit notes with running numbers, card payments through Stripe, Payrexx (TWINT) or PayPal.
• Memberships and courses: plans with a price and a rhythm, free plans, trials, renewals and reminders that run by themselves, content locked per page, category, block or file, courses with lessons, a pace, a quiz and points, and a member area built from blocks.
• Appointments: services with a duration and a break, people with their own hours and days off, free slots or a request per service, a confirmation that carries a cancel link, and a screen where what waits for an answer stands on top.
• Legal pages: an imprint and a privacy policy read from the site itself, as drafts you edit like any other page — and a warning when a module changes what is true. The policy follows the GDPR and fits any country in the EU or the EEA; Switzerland, Germany and Austria add the duties of their own.
• Newsletter: lists, double opt-in, sending in batches at a time you choose, opens and clicks, header and footer templates, content templates, duplicate.
• Thirty languages: every language its own address, translated on first view and then stored, with hreflang, a language switcher block and corrections that survive a retranslation.
• Custom fields: sets of fields per kind of post, filled in by whoever writes, written into a template by a block.
• AI: sections, whole pages, blog posts and pictures from a description, with your own key — nothing runs without it.
• Connections (MCP): one key per AI tool, reading or writing, no access to users, orders, settings or files, every change undoable as a version.
• Backups: full and incremental, on a plan, checked after every run, restore, download and upload.
• Snippets: CSS, JavaScript and HTML with a name, a place and a condition, where an error stays with the snippet instead of taking the page down.

Pro blocks

• Content: Carousel, Popup, Table, Figure, Accordion, Accordion entry, Tabs, Tab, HTML, Price, Price switch, Countdown, Timeline, Station.
• Media: Google Maps, Facebook embed, Video playlist, Video in the list, Image hotspots, Point.
• Shop: Products, Product, Cart, Cart button, Checkout, Account.
• Memberships and courses: Memberships, Members only, Course, Courses, Learning points, Save it, Saved and seen.
• Appointments: Appointment.
• Newsletter: Newsletter, Unsubscribe.
• Other modules: Custom field, Languages.

Build the whole website

One editor covers everything a visitor sees, down to the reusable parts used on many pages at once. Sections, groups and columns can end in a shape instead of a straight line — a wave, a slant, a triangle, mountains — drawn in the page, so nothing is loaded and nothing is blurry.

Start with a complete demo website

Thirty-five finished websites come free: a bakery, a hotel, a restaurant, a photographer, a law firm, an architect, a yoga studio, a wedding planner and more — each one a different trade and a different look. One click installs a demo with its pages, templates, menus and pictures; another click removes it completely.

Free and Pro

Pro adds the eleven modules and 38 blocks listed above. It is bought once, per number of websites, with a year of updates and support included.

Pro is a separate plugin: nothing here is locked or waits for a key.

External services

The plugin talks to the services below. Each one is called only in the situation described, never in the background.

Demo catalogue (amberathemebuilder.com)
When you open the demo screen, the plugin fetches the list of demos from https://amberathemebuilder.com/katalog/demos.json. When you install a demo, it downloads that demo’s zip file from the same host. The request carries no personal data and no site information beyond what any HTTP request carries (the server’s IP address). The service is run by the plugin author, ambera GmbH; terms, privacy policy.

Google Fonts (fonts.googleapis.com, fonts.gstatic.com)
When you type a font name under Settings → Fonts and press “Fetch and store it”, your server downloads the font files once from Google and stores them in your uploads folder. From then on the font is served from your own site; visitors’ browsers never contact Google. The request is made by your server, not by visitors, and sends the font name only. Terms, privacy policy.

Pixabay (pixabay.com)
The media manager can search free stock photos on Pixabay. This works only after you enter your own Pixabay API key under Settings; without a key nothing is sent. When you search, the search words and your key are sent to https://pixabay.com/api/; when you pick a photo, the image file is downloaded from Pixabay to your media library. Terms, privacy policy.

Country lookup (api.country.is)
The statistics module can look up a visitor’s country. By default it reads the country from a header your CDN sets (Cloudflare and others) and asks nothing outside. If you switch on the country lookup under Settings → Statistics, the visitor’s IP address is sent to https://api.country.is/ and only the two-letter country code is stored. This is off by default. Privacy policy.

Video embeds (YouTube, Vimeo)
The video block shows a poster image and loads the player from youtube-nocookie.com or player.vimeo.com only after the visitor clicks. YouTube terms, Vimeo privacy.

Support portal (portal.amberathemebuilder.com)
“Support ticket” and “Feature request” on the Help screen are links that open the plugin author’s support portal in a new tab. The link carries your site’s host name and a short technical summary (plugin, WordPress and PHP version, site language) so the form there is prefilled; nothing is sent unless you click the link, and nothing is submitted until you send the form on the portal. The plugin itself never calls the portal. Run by ambera GmbH; terms, privacy policy.

Help videos (YouTube)
The Help screen can show short tutorial films. A tile shows only the title; the player from youtube-nocookie.com is loaded when you press play, and only then. YouTube terms, Google privacy policy.

PayPal button (paypal.com)
The PayPal block renders a plain form that leads to https://www.paypal.com/cgi-bin/webscr when a visitor clicks the button. Only then, and only what you entered in the block, is sent: your PayPal e-mail address, the item name, amount and currency, and the return address. The plugin itself never calls PayPal. User agreement, privacy statement.

Share links (Facebook, X, LinkedIn, WhatsApp, Telegram, Pinterest)
The share block is a row of ordinary links to the share pages of these networks. A link opens the network with the address and title of the page when a visitor clicks it; no script from any network is loaded and nothing is sent before the click. Meta privacy, X privacy, LinkedIn privacy, WhatsApp privacy, Telegram privacy, Pinterest privacy.

Interpol (interpol.int)
When the firewall is set to “harsh” and an address on the block list keeps coming back, the blocked request is answered with a redirect to Interpol’s public cybercrime page instead of an error page. This is a plain redirect of the blocked visitor; nothing is sent to Interpol by the plugin.

Images in imported HTML
When you paste HTML into the editor’s import, images that point to another server are copied into your media library so the page does not load from there on every visit. Your server fetches only the image addresses in the HTML you pasted.