Free whiteglove setup from a ConsentStack Concierge
Contact Form 7

Contact Form 7

Contact Form 7 is a WordPress plugin that renders and processes contact forms on WordPress pages via AJAX. Scripts handle field validation, spam filtering through optional reCAPTCHA, and form submission. Only data entered by the user is collected and transmitted to the site administrator.

Back to Vendor Library

Overview

Contact Form 7 is one of the most widely installed WordPress plugins, providing simple, customizable contact forms. Its scripts run entirely within the WordPress installation — form rendering, validation, and submission processing happen on the site's own domain with no third-party data transmission. Contact Form 7 optionally integrates with reCAPTCHA for spam prevention.

What This Script Does

Contact Form 7's scripts are served from the WordPress installation:

  • Form rendering: Renders HTML forms with configured fields (name, email, subject, message, file upload, etc.) using WordPress's built-in templating.
  • Client-side validation: JavaScript validates required fields, email format, and file upload restrictions before submission.
  • AJAX submission: Forms submit via AJAX to the WordPress backend, providing a seamless experience without full page reloads. Confirmation or error messages display inline.
  • Email delivery: Submitted form data is sent to the configured email address(es) using WordPress's mail function or an SMTP plugin. No data is stored in the database by default.
  • Optional reCAPTCHA: If spam protection is enabled, loads Google reCAPTCHA scripts (which have their own privacy implications and consent requirements).
  • No third-party scripts: By default, Contact Form 7 loads no external JavaScript. All scripts are served from the site's own domain.
  • No cookies: Contact Form 7 does not set cookies.

Consent & Compliance

Contact Form 7 falls under the functional/essential consent category. Contact forms serve a communication function that the visitor initiates.

Under GDPR and ePrivacy, Contact Form 7's scripts set no cookies and make no third-party requests (unless reCAPTCHA is enabled). The personal data submitted through forms requires a lawful basis under GDPR Article 6. Since data stays on the site operator's server, no third-party data sharing occurs by default.

Under CCPA/CPRA, form data is collected directly from the consumer for the requested communication purpose with no third-party involvement.

Should You Block This Without Consent?

No. Contact Form 7 runs entirely on the site's own domain with no cookies, no external scripts, and no third-party data sharing. Blocking it would prevent visitors from contacting the site operator. If reCAPTCHA is enabled, assess its consent requirements separately.

Is Contact Form 7 GDPR compliant?

Contact Form 7 typically loads functional trackers, which are not strictly necessary for your site to work. Under the GDPR and the ePrivacy Directive, non-essential cookies and trackers must stay blocked until a visitor gives clear opt-in consent. So Contact Form 7 can be fully GDPR compliant, but only if your site holds its scripts until consent is granted and lets visitors decline just as easily. Compliance depends on how your site loads Contact Form 7, not on Contact Form 7 itself.

Visit website

Consent Categories

FunctionalEssential

Also Known As

contact form 7cf7wordpress contact formcontact form 7 consentcf7 plugin

Industries

Computers Electronics and TechnologyProgramming and Developer SoftwareBusiness and Consumer ServicesScience and Education

Tracked Domains (1)

contactform7.comFunctional

contactform7.com is a functional domain operated by Contact Form 7, used to run site features like chat, video, embeds, and preferences.

Frequently Asked Questions

Related Vendors

MicroAd
MicroAd
Japanese mobile and display advertising platform. MicroAd scripts serve targeted display ads on Japanese publisher sites and participate in programmatic auctions for Japanese and Asian market inventory.
OpenStreetMap
OpenStreetMap
OpenStreetMap provides free, open-source collaborative map data embedded on websites as interactive tile maps. When an OSM map loads, tile images are fetched from openstreetmap.org servers, which may log the requesting IP address. No tracking scripts, advertising technologies, or user-identifying cookies are used.
Brizy Cloud
Brizy Cloud
Brizy Cloud serves website content through its visual builder platform. Scripts render page components and manage dynamic content, and may load conversion tracking or analytics integrations configured by the site owner on Brizy-hosted websites.
Drupal
Drupal
Drupal is an open-source CMS whose pages load core JavaScript for UI components, form handling, and AJAX requests. Additional scripts depend on installed modules and site configuration; analytics, advertising, or tracking may be present based on the site operator's module and theme choices.
Breezy HR
Breezy HR
Breezy HR embeds career site widgets and job listing pages on employer websites. Scripts render open positions, handle application forms, and transmit candidate-submitted data to Breezy HR for applicant tracking and recruitment pipeline management.
AccessAlly
AccessAlly
AccessAlly scripts manage membership access control and course delivery on WordPress sites. Scripts enforce content gating based on membership level, track course progression, deliver protected content to authenticated members, and handle member account interactions.

Manage consent for Contact Form 7

ConsentStack automatically detects and manages Contact Form 7 trackers so your site stays compliant with global privacy regulations.

Get started free