Airtable

Overview

Airtable is a cloud-based collaborative database platform that combines spreadsheet accessibility with relational database structure. Websites embed Airtable forms and shared views to collect structured data from visitors or display database content publicly. Common use cases include event registration forms, application intake processes, feedback collection, and publicly shared project trackers or resource directories.

What This Script Does

Airtable embeds on websites via iframes or JavaScript from Airtable's CDN.

• Embeddable forms: Airtable forms load via iframe from airtable.com/embed/, rendering input fields configured by the form creator (text, email, phone, dropdowns, file attachments, checkboxes). When submitted, data is written directly to the corresponding Airtable base (database).
• Shared views: Airtable shared views embed as read-only or interactive tables, kanban boards, galleries, or calendars via iframe from airtable.com/embed/.
• Scripts loaded: The iframe loads Airtable's application JavaScript from airtable.com, which handles form validation, submission, and view rendering within the embedded frame.
• Cookies set: Session cookies on the airtable.com domain within the iframe for maintaining form state and preventing duplicate submissions. Due to iframe sandboxing, these cookies generally do not affect the host domain.
• Data collected: Form submissions include all field values entered by the visitor (names, emails, file uploads, custom fields). Shared views do not collect visitor data beyond standard HTTP request information.
• No behavioral tracking: Airtable embeds do not track visitor browsing behavior, set first-party cookies on the host domain, or perform analytics on the host page.

Consent & Compliance

Airtable embeds fall under the functional consent category.

Under GDPR and ePrivacy, embedded Airtable forms serve a functional purpose — collecting information that visitors explicitly submit. Since the embed operates within an iframe, cookies are scoped to the airtable.com domain and do not affect the host site. The ePrivacy analysis depends on whether the iframe's third-party cookies are blocked by browser defaults (Safari, Firefox block third-party cookies by default). Personal data collected through forms requires a GDPR-compliant legal basis.

Under CCPA/CPRA, form submission data constitutes personal information. The host site should disclose Airtable as a data processor in its privacy policy.

Should You Block This Without Consent?

No. Airtable embeds serve functional data collection and display purposes with minimal tracking footprint. Forms are explicitly submitted by the visitor, and shared views are passive content displays. The iframe-based embed isolates Airtable's cookies from the host domain. Blocking would remove the form or view functionality from the page.