Wufoo
Embeds contact forms, surveys, payment forms, and event registration forms directly on web pages. Collects all personally identifiable information users enter into form fields, including names, email addresses, phone numbers, and payment details depending on the form configuration.
Overview
Wufoo (owned by SurveyMonkey) is an online form builder that enables websites to embed contact forms, surveys, payment forms, and event registration forms. Its scripts render the form interface within an iframe or embedded container on the host page, collecting submitted data and storing it on Wufoo's servers for the site operator to access through the Wufoo dashboard.
What This Script Does
Wufoo's embed scripts load form interfaces on the host page:
- Form rendering: Displays customizable form layouts with various field types — text inputs, dropdowns, checkboxes, file uploads, and payment fields (integrated with Stripe or PayPal).
- Data collection: Captures all information the visitor enters into form fields — names, email addresses, phone numbers, messages, and payment details. All submitted data is transmitted to and stored on Wufoo's (SurveyMonkey's) servers.
- Iframe embedding: Forms are typically rendered within an iframe that loads content from
wufoo.com, isolating the form from the host page's DOM. - Session cookies: Wufoo may set cookies within the iframe context for form session management, CSRF protection, and preventing duplicate submissions.
- No behavioral tracking: Wufoo does not track visitor browsing behavior on the host page beyond the form interaction. Data collection is limited to what the visitor explicitly submits.
Consent & Compliance
Wufoo falls under the functional consent category. Forms serve a communication or data collection function that the visitor initiates.
Under GDPR and ePrivacy, the iframe-loaded form from wufoo.com involves a third-party context. Session cookies within the iframe are functional but set on a third-party domain. The personal data submitted through forms is stored on SurveyMonkey's infrastructure, making SurveyMonkey a data processor — this requires a data processing agreement. The site operator must disclose Wufoo/SurveyMonkey as a data processor in their privacy policy.
Under CCPA/CPRA, form submission data constitutes personal information collected directly from the consumer. SurveyMonkey acts as a service provider under CCPA when processing form data on behalf of the site operator.
Should You Block This Without Consent?
No. Wufoo forms serve a functional purpose that the visitor initiates. Blocking the form would prevent visitors from contacting the site operator or completing requested actions. Ensure your privacy policy discloses Wufoo/SurveyMonkey as a form data processor.
Is Wufoo GDPR compliant?
Wufoo typically loads functional trackers, which are not strictly necessary for your site to work. Under the GDPR and the ePrivacy Directive, non-essential cookies and trackers must stay blocked until a visitor gives clear opt-in consent. So Wufoo can be fully GDPR compliant, but only if your site holds its scripts until consent is granted and lets visitors decline just as easily. Compliance depends on how your site loads Wufoo, not on Wufoo itself.
Consent Categories
Also Known As
Industries
Tracked Domains (1)
wufoo.comFunctionalwufoo.com is a functional domain operated by Wufoo, used to run site features like chat, video, embeds, and preferences.
Frequently Asked Questions
Related Vendors
Manage consent for Wufoo
ConsentStack automatically detects and manages Wufoo trackers so your site stays compliant with global privacy regulations.