Jotform AI

Overview

JotForm is a widely used online form builder that enables websites to embed custom forms for data collection, registrations, surveys, and payments. The AI-enhanced version adds conversational form interfaces and intelligent field suggestions. JotForm embeds appear across business websites, event pages, educational institutions, and nonprofit donation portals as the primary mechanism for structured data collection from visitors.

What This Script Does

JotForm forms embed on websites via iframes or JavaScript from cdn.jotfor.ms and form.jotform.com.

• Scripts loaded: Forms load from form.jotform.com or cdn.jotfor.ms, rendering the form interface with fields configured by the form creator (text inputs, dropdowns, file uploads, payment fields, signature pads, etc.)
• Form submission: When a visitor completes and submits the form, all field data is transmitted to JotForm's servers. The submission is stored in JotForm's cloud and optionally forwarded to integrations (email, Google Sheets, CRM systems, payment processors).
• Cookies set:
  • Session cookies on the jotform.com domain to maintain form state during multi-page forms
  • The embed may set cookies for tracking form completion rates and abandonment events if the form creator has enabled JotForm Analytics
• Data collected: All form field values submitted by the visitor (names, emails, phone numbers, addresses, file uploads, and any custom fields). Form interaction metadata includes time to complete, field focus events, and abandonment data (if analytics are enabled).
• Payment processing: Forms with payment fields connect to Stripe, PayPal, or Square through JotForm's payment integrations, adding those payment processors' scripts to the page.
• Conditional logic: The form engine evaluates client-side conditional rules to show/hide fields and pages based on user inputs, all processed in the browser.

Consent & Compliance

JotForm embeds fall under the functional consent category.

Under GDPR and ePrivacy, embedded forms serve a functional purpose — collecting information that the visitor explicitly chooses to submit. If the form embed sets cookies before user interaction (for analytics or session initialization), those cookies require consent under the ePrivacy Directive. The personal data collected through form fields requires a GDPR-compliant legal basis, typically consent (Article 6(1)(a)) or legitimate interest depending on the form's purpose. JotForm is GDPR-compliant and offers data processing agreements and EU data residency options.

Under CCPA/CPRA, form submission data (names, emails, phone numbers) constitutes personal information. The host site's privacy policy should disclose JotForm as a third-party data processor and describe how submitted data is used.

Should You Block This Without Consent?

No. JotForm embeds serve a functional purpose — visitors deliberately interact with forms to submit information. The core form functionality does not require tracking cookies. If JotForm Analytics is enabled on the form, that component adds non-essential tracking and should be considered separately under analytics consent. For the base form embed, blocking it would remove critical data collection functionality from the page.