Forminator not respecting cookie choice for reCaptcha

  • Resolved olbro

    (@olbro)


    1 year, 8 months ago

    If users decline cookies, the Google reCaptcha cookie shouldn’t be loaded, to respect the EU’s GDPR. And users shouldn’t be able to submit the form, receiving instead a message advising them to first accept cookies to be able to submit the form.

    But currently that’s not the case. Forminator loads the Google reCaptcha cookie regardless of the user’s choice. AFAIK that’s a violation of EU’s regulations.

    Would it be possible to have an update of the Forminator plugin to fix this issue?

    • This topic was modified 1 year, 8 months ago by olbro.

    The page I need help with: [log in to see the link]

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Support Williams – WPMU DEV Support

    (@wpmudev-support8)

    Hi @olbro

    I hope you’re well today!

    Rejecting cookies means that whatever plugin are you using for this must be “aware” of the script setting cookie and different plugins do it in different ways. In most (if not all) cases it requires some parameters to be added first to such script (reCaptch JS scripts in this case).

    In other words, Forminator cannot “know” if cookies are allowed or not because it would have to be informed about it – so it could honor that decision and address reCaptcha script accordingly.

    There are many GDPR compatibility plugins and they do that in a bit different ways. Forminator does include out of the box compatibility with free Complianz Cookie Consent plugin so if this plugin is set to control reCaptcha cookies and block displying reCaptcha if cookies are not accepted – it will block reCaptcha in Forminator as well.

    Depending on reCaptcha configuration there may be a messaged from reCaptcha showing up that accepting cookies is necessary to continue but it will prevent showing it and setting cookies by it.

    Kind regards,
    Adam

    Thread Starter olbro

    (@olbro)

    Thank you for your reply.

    I’m using the Complianz plugin. If a visitor of my website choose to reject the cookies, the Google reCaptcha cookie is blocked on the contact form, which is a Divi form. But on the Forminator form which I use on the “Request a quote” page of my website, it is not.

    I reviewed the settings of Complianz and both reCaptcha and Forminator are active. I resaved them then tested again and after choosing to decline the cookies I was able to send the form and the google recaptcha cookie is there: https://imgur.com/a/VvlY6KN

    • This reply was modified 1 year, 8 months ago by olbro. Reason: typo
    Thread Starter olbro

    (@olbro)

    I did some more testing and here’s what I found:

    If I reject cookies on my website and visit the Quote page, where the Forminator form is protected by reCaptacha v3, no cookie is loaded.

    If I then fill out the form and click Send, the form is sent and a google recaptcha is written in my browser.

    I’m not sure if that’s how it’s supposed to work. My understanding was that if a user rejects cookies, then the form should be inoperative.

    Thread Starter olbro

    (@olbro)

    Problem solved: the Load form using AJAX setting was not disabled.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Forminator not respecting cookie choice for reCaptcha’ is closed to new replies.