Data443 Risk Mitigation, Inc.

<p>The easiest way to make your Gravity Forms GDPR compliant!</p>
<p>This plugin is a service of <a href="https://data443.com" rel="nofollow ugc">Data443</a>.</p>
<p>Data443 is a Data Security and Compliance company traded on the OTCMarkets as <a href="https://www.otcmarkets.com/stock/ATDS/overview" rel="nofollow ugc">ATDS</a>. We have been providing leading GDPR compliance products such as Global Privacy Manager (<a href="https://www.data443.com/global-privacy-manager/" rel="nofollow ugc">Data443™ Global Privacy Manager</a>), Blockchain privacy, and enterprise cloud eDiscovery tools.</p>
<p>This plugin adds new privacy features to Gravity Forms. Your visitors can download or delete their form submissions automatically or submit a request for the site admin to do so.</p>
<p>Until WordPress releases their own GDPR compliance update, this plugin requires <a href="https://wordpress.org/plugins/gdpr-framework/" rel="ugc">The GDPR Framework</a> to function (it’s free!)</p>
<p>Make sure to also read the guide! You don’t need to drown your customers in pointless acceptance checkboxes if you know what you’re doing!</p>
<h3>Disclaimer</h3>
<p>Using Gravity Forms: GDPR Add-On does NOT guarantee compliance to GDPR. This plugin gives you general information and tools, but is NOT meant to serve as complete compliance package. Compliance to GDPR is risk-based ongoing process that involves your whole business. Data443 is not eligible for any claim or action based on any information or functionality provided by this plugin.</p>
<h3>Documentation</h3>
<p>How to use this plugin (practical guide): <a href="https://data443.atlassian.net/servicedesk/customer/portal/2/article/28246137" rel="nofollow ugc">Making your Gravity Forms GDPR-compliant</a><br />
How to use this plugin (the legal stuff explained): <a href="https://data443.atlassian.net/servicedesk/customer/portal/2/article/2079293576" rel="nofollow ugc">Legal grounds for processing data</a><br />
Full documentation: <a href="https://data443.atlassian.net/servicedesk/customer/portal/2/article/2078998660" rel="nofollow ugc">The WordPress Site Owner’s Guide to GDPR</a><br />
For developers: <a href="https://data443.atlassian.net/servicedesk/customer/portal/2/article/2082439194" rel="nofollow ugc">Developer Docs</a><br />
Knowledge Base: <a href="https://data443.atlassian.net/servicedesk/customer/portal/2/article/192708653" rel="nofollow ugc">Knowledge Base</a></p>
<h3>Features</h3>
<p>☑ Allow both users and visitors without an account to view, export and delete their form submissions or request the site admin to do so;<br />
☑ Configure forms to be excluded from viewing, exporting or deleting.<br />
☑ Support for anonymization: allow admin to select which fields must be anonymized;<br />
☑ Track, manage and withdraw consent.</p>


Gravity Forms: GDPR Framework Add-On

The easiest way to make your Gravity Forms GDPR-compliant. Fully documented, extendable and developer-friendly.

getterms

<p>The GetTerms plugin helps you implement cookie consent management and embed legal policies directly into your WordPress site. It connects with your GetTerms account to provide compliant, auto-updating documents and a fully configurable cookie consent banner.</p>
<h3>Features</h3>
<ul>
<li>Connect to your GetTerms Compliance Pack using a unique token.</li>
<li>Embed the Cookie Consent Widget site-wide or via manual integration.</li>
<li>Shortcodes to display live-updated legal documents (Privacy Policy, Terms, AUP, etc.).</li>
<li>Support for multiple languages for both widget and policies.</li>
</ul>
<h3>Usage</h3>
<h3>Setting Up</h3>
<ol>
<li>Navigate to <code>GetTerms</code> in the WordPress admin menu.</li>
<li>Enter your GetTerms token and save your settings.</li>
</ol>
<h3>Embedding the Cookie Consent Widget</h3>
<ul>
<li>Enable the auto-embed option in plugin settings to insert the consent widget in the <code>&lt;head&gt;</code> tag.</li>
<li>You can also embed manually with the provided script tag for advanced use cases or multilingual configurations.</li>
<li>To ensure proper consent enforcement, embed the script as early as possible in the head section.</li>
<li>If you have manually included other scripts in your <code>&lt;head&gt;</code> the recommendation is to manually embed the GetTerms script above all other scripts, and not use auto-embed</li>
</ul>
<h3>Using Shortcodes</h3>
<p>Use the following shortcodes to display your policy documents:</p>
<ul>
<li><code>[getterms_privacy_en]</code>, <code>[getterms_terms_en]</code>, <code>[getterms_aup_en]</code></li>
<li><code>[getterms_privacy_fr]</code>, <code>[getterms_terms_fr]</code>, <code>[getterms_aup_fr]</code></li>
<li>Additional languages and policies are listed in the plugin settings.</li>
</ul>
<h3>How wp_head and wp_enqueue_script work</h3>
<p>WordPress loads styles and scripts in two steps:</p>
<p>1) Registration + enqueue (what you do in PHP)<br />
– You register a script/style and enqueue it using WordPress functions.<br />
– Common hooks:<br />
  – <code>wp_enqueue_scripts</code> (front end): enqueue scripts/styles for the theme and plugins.<br />
  – <code>admin_enqueue_scripts</code> (wp-admin): enqueue for specific admin screens.<br />
  – <code>login_enqueue_scripts</code> (login screen): enqueue for wp-login.php.</p>
<p>2) Output (what WordPress prints into the page)<br />
– WordPress prints the enqueued styles and scripts into the HTML at the proper places, using theme hooks:<br />
  – <code>wp_head</code>: prints styles and any head scripts (e.g., those with <code>$in_footer = false</code>).<br />
  – <code>wp_footer</code>: prints scripts that were enqueued for the footer (those with <code>$in_footer = true</code>).</p>
<p>In practice, you should enqueue on the correct action, and let WordPress output them on <code>wp_head</code>/<code>wp_footer</code>. Example:</p>
<ul>
<li>
<p>Register and enqueue a script</p>
<p>function myplugin_enqueue_assets() {<br />
  wp_register_script(<br />
      ‘myplugin-frontend’,<br />
      plugins_url(‘dist/myplugin.js’, <strong>FILE</strong>),<br />
      array(‘jquery’),<br />
      ‘1.0.0’,<br />
      true // load in footer<br />
  );<br />
  wp_enqueue_script(‘myplugin-frontend’);<br />
}<br />
add_action(‘wp_enqueue_scripts’, ‘myplugin_enqueue_assets’);</p>
</li>
<li>
<p>What gets printed where</p>
<ul>
<li>Because <code>$in_footer = true</code>, the script tag is printed near the end of the page when the theme calls <code>wp_footer()</code>.</li>
<li>If <code>$in_footer = false</code> (default), it will be printed in the <code><head></code> when the theme calls <code>wp_head()</code>.</li>
</ul>
</li>
</ul>
<p>How this plugin uses these hooks<br />
– For the Cookie Consent Widget, you can choose between:<br />
  – Auto-embed: The plugin hooks into <code>wp_head</code> very early to print the consent script as high as possible in the <code><head></code> for best consent enforcement. This is intentional because consent tools must run before other scripts.<br />
  – Manual embed: You paste the provided <code><script></code> tag directly into your theme (ideally above other scripts in the head) if you need strict ordering or have custom setups.<br />
– For admin pages and settings, the plugin uses <code>admin_enqueue_scripts</code> to load its admin bundle only on our settings page to keep the rest of wp-admin lightweight.</p>
<p>Troubleshooting and best practices<br />
– Always load third-party tracking scripts after consent scripts have run. If you must hard-code tags, put the GetTerms script above them in the head.<br />
– Never echo <code><script></code> tags directly in templates unless you must. Prefer <code>wp_enqueue_script</code> to let WP handle dependencies, versions, and placement.<br />
– Make sure your theme calls <code>wp_head()</code> before <code></head></code> and <code>wp_footer()</code> before <code></body></code>. Most themes already do; if not, scripts will not appear.</p>
<h3>Data Collection and Privacy</h3>
<p>The plugin communicates with the GetTerms content network (<code>https://app.getterms.io</code>, <code>https://gettermscmp.com</code>, <code>https://gettermscdn.com</code>) to deliver policy content and manage cookie consent. The following data is transmitted:</p>
<ul>
<li><strong>Authentication Token</strong>: Used to authenticate and fetch Compliance Pack data.</li>
<li><strong>Domain Name</strong>: Validates the plugin’s authorization and retrieves domain-specific settings.</li>
<li><strong>User Consent Logs</strong>: Records of accepted/rejected cookie categories (anonymized).</li>
<li><strong>Policy Requests</strong>: Dynamic retrieval of policy content for embedding.</li>
<li><strong>Error Logs</strong>: Technical error messages (non-personal) may be sent to assist with debugging.</li>
</ul>
<p>All data is anonymized where applicable and stored in compliance with GDPR data sovereignty standards.</p>
<p>For more information, refer to our:<br />
– <a href="https://getterms.io/our-privacy-policy" rel="nofollow ugc">Privacy Policy</a><br />
– <a href="https://getterms.io/our-terms-of-service" rel="nofollow ugc">Terms of Service</a></p>
<h3>External Services</h3>
<p>This plugin relies on external services operated by GetTerms to function. It reaches out to these services to display the Cookie Consent Widget, record consent choices, and embed automatically updating legal documents. Below we explain what each service is used for, what data is sent, and when.</p>
<p>Services used (all operated by GetTerms Pty Ltd):<br />
– https://app.getterms.io — Application/API used for account authentication, compliance pack configuration, and policy retrieval.<br />
– https://gettermscmp.com — Cookie Consent Widget service that renders the banner and manages user consent interactions.<br />
– https://gettermscdn.com — Content Delivery Network for static assets and the document/embed runtime used to display policies.</p>
<p>What data is sent and when<br />
– When you save settings in the WordPress admin (Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> GetTerms):<br />
  – Authentication token (provided by you) is sent to app.getterms.io to verify your account and fetch your Compliance Pack configuration.<br />
  – Your site’s domain is sent to app.getterms.io to validate authorization and deliver domain‑specific settings.<br />
– When a page loads with the Cookie Consent Widget enabled (auto‑embed or manual embed):<br />
  – The page will request widget resources from gettermscmp.com and gettermscdn.com.<br />
  – Anonymous consent state and user choices (e.g., accepted/rejected categories) are transmitted to gettermscmp.com when visitors interact with the banner, for the purpose of storing and enforcing consent. No personally identifiable information is required for this.<br />
– When a page renders a policy via a shortcode (e.g., Privacy Policy, Terms):<br />
  – The embed runtime from gettermscdn.com requests the latest policy content from app.getterms.io and/or the CDN, along with the configured language.<br />
– When technical errors occur:<br />
  – Non‑personal error details may be sent to the above services to help diagnose and resolve issues.</p>
<p>Terms of Service and Privacy Policy<br />
– All of the above domains are operated by GetTerms and governed by the same legal documents:<br />
  – Terms of Service: https://getterms.io/our-terms-of-service<br />
  – Privacy Policy: https://getterms.io/our-privacy-policy</p>
<p>We disclose these external connections for transparency and to help you assess compliance obligations for your site.</p>
<h3>Development</h3>
<h3>Source for Compiled Assets (Required by WordPress.org)</h3>
<p>The full human‑readable, non‑minified source code for the compiled JavaScript/CSS is publicly available in our GitHub repository. This satisfies the WordPress.org guideline requiring publicly accessible sources for generated assets.</p>
<ul>
<li>
<p>Public source repository (first‑party):</p>
<ul>
<li>https://github.com/GetTerms/getterms-cookie-consent-and-policies</li>
<li>Key sources: <code>src/getterms.js</code>, <code>vite.config.mjs</code>, <code>package.json</code></li>
</ul>
</li>
<li>
<p>Compiled files shipped with the plugin (in this ZIP):</p>
<ul>
<li>JavaScript bundle: <code>dist/getterms.bundle.js</code></li>
</ul>
</li>
<li>
<p>Third‑party libraries used in the bundle (public sources):</p>
<ul>
<li>Tippy.js (tooltip library): https://github.com/atomiks/tippyjs</li>
<li>Popper Core (positioning engine): https://github.com/popperjs/popper-core</li>
</ul>
</li>
</ul>
<p>Note: The distributed plugin package does not include the <code>src/</code> directory. For review or contributions, please use the public repository linked above.</p>
<h3>Build Tools</h3>
<p>This plugin uses modern build tooling for asset management:</p>
<ul>
<li><strong>Vite</strong> compiles source JavaScript files from <code>src/</code> to <code>dist/</code>.</li>
<li><strong>NPM</strong> manages dependencies and scripts.</li>
<li>Output is compiled as an IIFE for safe WordPress execution.</li>
</ul>
<p>Build config: <code>vite.config.mjs</code></p>
<p>Build steps to reproduce the distributed assets:</p>
<ol>
<li>Install Node.js (use <code>.nvmrc</code> for the recommended version).</li>
<li>Clone the public repository and from the plugin root directory, run:
<ul>
<li><code>npm install</code></li>
<li><code>npm run build</code></li>
</ul>
</li>
<li>The compiled output will be written to <code>dist/</code>.</li>
</ol>
<p>No private repositories are required to build; all source files needed are available in the public repository.</p>
<h3>Support</h3>
<p>For help, email <a href="mailto:support@getterms.io" rel="nofollow ugc">support@getterms.io</a></p>
<h3>License</h3>
<p>This plugin is licensed under the <a href="https://www.gnu.org/licenses/gpl-2.0.html" rel="nofollow ugc">GPLv2 or later</a>.</p>


GetTerms Cookie Consent & Policies

The GetTerms plugin allows users to manage their GetTerms compliance packs, embed auto-updating policies, and display their Cookie Consent Widget.

Gravity Forms: GDPR Framework Add-On vs GetTerms Cookie Consent & Policies