Wufoo

Overview

Wufoo (owned by SurveyMonkey) is an online form builder that enables websites to embed contact forms, surveys, payment forms, and event registration forms. Its scripts render the form interface within an iframe or embedded container on the host page, collecting submitted data and storing it on Wufoo's servers for the site operator to access through the Wufoo dashboard.

What This Script Does

Wufoo's embed scripts load form interfaces on the host page:

• Form rendering: Displays customizable form layouts with various field types — text inputs, dropdowns, checkboxes, file uploads, and payment fields (integrated with Stripe or PayPal).
• Data collection: Captures all information the visitor enters into form fields — names, email addresses, phone numbers, messages, and payment details. All submitted data is transmitted to and stored on Wufoo's (SurveyMonkey's) servers.
• Iframe embedding: Forms are typically rendered within an iframe that loads content from wufoo.com, isolating the form from the host page's DOM.
• Session cookies: Wufoo may set cookies within the iframe context for form session management, CSRF protection, and preventing duplicate submissions.
• No behavioral tracking: Wufoo does not track visitor browsing behavior on the host page beyond the form interaction. Data collection is limited to what the visitor explicitly submits.

Consent & Compliance

Wufoo falls under the functional consent category. Forms serve a communication or data collection function that the visitor initiates.

Under GDPR and ePrivacy, the iframe-loaded form from wufoo.com involves a third-party context. Session cookies within the iframe are functional but set on a third-party domain. The personal data submitted through forms is stored on SurveyMonkey's infrastructure, making SurveyMonkey a data processor — this requires a data processing agreement. The site operator must disclose Wufoo/SurveyMonkey as a data processor in their privacy policy.

Under CCPA/CPRA, form submission data constitutes personal information collected directly from the consumer. SurveyMonkey acts as a service provider under CCPA when processing form data on behalf of the site operator.

Should You Block This Without Consent?

No. Wufoo forms serve a functional purpose that the visitor initiates. Blocking the form would prevent visitors from contacting the site operator or completing requested actions. Ensure your privacy policy discloses Wufoo/SurveyMonkey as a form data processor.