Works with your stack
Cookie consent for Gravity Forms
entries checked before they land
Gravity Forms sets no cookie on your public pages. Consent comes in with its spam protection: the reCAPTCHA add-on runs Google reCAPTCHA on every page and scores each entry. Cookie Rocks holds reCAPTCHA until the visitor allows it, and asks on the form itself.
By Rocketgenius · gravityforms.com
Is this your product? Tell us if anything here is out of date. Write to us
Gravity Forms
WordPress plugin
- How
- Reproduced in the Cookie Rocks tests
What Gravity Forms puts on your pages
- The form
- Its scripts and styles, served by your site. Its only cookie belongs to the entry screen in your admin.
- reCAPTCHA v3 add-on
- Runs Google reCAPTCHA on every page of the site and scores each entry. Entries with a low score are saved as spam.
- reCAPTCHA v2 field
- A captcha field in the form, loaded on the pages that show it.
- Honeypot and Turnstile
- A built-in honeypot and an official Cloudflare Turnstile add-on. Neither needs consent.
- Geolocation add-on
- Address fields that call Google Places.
What matters for consent with Gravity Forms
A form that checks with reCAPTCHA
When a Gravity Forms form uses reCAPTCHA, Cookie Rocks stops the submit until reCAPTCHA is allowed, so no entry is sent without its check.
The question sits on the form
Each Gravity Forms form gets a short note at its top, with a button that allows reCAPTCHA alone. The page reloads and the fields come back, except passwords, files and hidden fields.
Held on every page
The v3 add-on loads on every page, not only where a form is. Cookie Rocks holds it everywhere, and only forms show the question.
No recaptcha.net switch
Gravity Forms has no documented way to load reCAPTCHA from recaptcha.net, so its reCAPTCHA comes from google.com.
Spam protection without consent
The honeypot and the Turnstile add-on fight spam without the question. With them, Cookie Rocks adds no note to the form.
Cookie Rocks with Gravity Forms
- When reCAPTCHA or hCaptcha waits for consent, shows an “Allow” request at the top of its forms.
- Holds sending until reCAPTCHA is allowed, and puts back what the visitor typed after the page reloads.
How we test it
Reproduced in our tests
It is sold by its publisher only. Our tests reproduce what it does to the scripts of a page, with its own setting names, and check that the consent script comes through unchanged.
Forms and captchas
Other plugins of the same kind.
Questions
Is Gravity Forms tested with the real plugin?
Not yet. Gravity Forms is sold outside WordPress.org, so its form markup is reproduced in our tests. The compatibility table says so.
Does Gravity Forms read WP Consent API?
No integration is documented. Its Consent field is a checkbox in the form, not a cookie choice.
Can I treat reCAPTCHA as necessary?
Yes, in the Cookie Rocks settings. It then loads for everyone, and the free Audit reminds you that authorities disagree on that exemption.
What happens after the 30-day trial?
The banner, your visitors’ choices and your proofs of consent keep working. Without a key, most settings lock, updates and support stop. Take a key at any time and everything opens again.
For Gravity Forms sites
Real entries, never filed as spam.
asked on the form
Every feature of the complete plugin for 30 days, no card. Gravity Forms keeps working as it does today.
- During the trial: everything, including the full settings and the scans
- After 30 days without a key: the banner, your visitors’ choices and your proofs of consent keep working
- What waits for a key: most settings, updates and support
Get your trial key
Your e-mail and your site. Your key arrives as soon as you confirm your e-mail.