Overview
Airtable is a cloud-based collaborative database platform that combines spreadsheet accessibility with relational database structure. Websites embed Airtable forms and shared views to collect structured data from visitors or display database content publicly. Common use cases include event registration forms, application intake processes, feedback collection, and publicly shared project trackers or resource directories.
What This Script Does
Airtable embeds on websites via iframes or JavaScript from Airtable's CDN.
- Embeddable forms: Airtable forms load via iframe from
airtable.com/embed/, rendering input fields configured by the form creator (text, email, phone, dropdowns, file attachments, checkboxes). When submitted, data is written directly to the corresponding Airtable base (database). - Shared views: Airtable shared views embed as read-only or interactive tables, kanban boards, galleries, or calendars via iframe from
airtable.com/embed/. - Scripts loaded: The iframe loads Airtable's application JavaScript from
airtable.com, which handles form validation, submission, and view rendering within the embedded frame. - Cookies set: Session cookies on the
airtable.comdomain within the iframe for maintaining form state and preventing duplicate submissions. Due to iframe sandboxing, these cookies generally do not affect the host domain. - Data collected: Form submissions include all field values entered by the visitor (names, emails, file uploads, custom fields). Shared views do not collect visitor data beyond standard HTTP request information.
- No behavioral tracking: Airtable embeds do not track visitor browsing behavior, set first-party cookies on the host domain, or perform analytics on the host page.
Consent & Compliance
Airtable embeds fall under the functional consent category.
Under GDPR and ePrivacy, embedded Airtable forms serve a functional purpose — collecting information that visitors explicitly submit. Since the embed operates within an iframe, cookies are scoped to the airtable.com domain and do not affect the host site. The ePrivacy analysis depends on whether the iframe's third-party cookies are blocked by browser defaults (Safari, Firefox block third-party cookies by default). Personal data collected through forms requires a GDPR-compliant legal basis.
Under CCPA/CPRA, form submission data constitutes personal information. The host site should disclose Airtable as a data processor in its privacy policy.
Should You Block This Without Consent?
No. Airtable embeds serve functional data collection and display purposes with minimal tracking footprint. Forms are explicitly submitted by the visitor, and shared views are passive content displays. The iframe-based embed isolates Airtable's cookies from the host domain. Blocking would remove the form or view functionality from the page.
Is Airtable GDPR compliant?
Airtable typically loads functional trackers, which are not strictly necessary for your site to work. Under the GDPR and the ePrivacy Directive, non-essential cookies and trackers must stay blocked until a visitor gives clear opt-in consent. So Airtable can be fully GDPR compliant, but only if your site holds its scripts until consent is granted and lets visitors decline just as easily. Compliance depends on how your site loads Airtable, not on Airtable itself.
Consent Categories
Also Known As
Industries
Tracked Domains (1)
airtable.comFunctionalairtable.com is a functional domain operated by Airtable, used to run site features like chat, video, embeds, and preferences.
Frequently Asked Questions
Related Vendors
Manage consent for Airtable
ConsentStack automatically detects and manages Airtable trackers so your site stays compliant with global privacy regulations.