Spam, Uploads, and Privacy

Configure Smart Form Builder’s honeypot and CAPTCHA checks, file-field restrictions, consent checkbox, privacy controls, and visitor-tracking retention settings.

This section explains the spam-prevention, upload-field, consent, privacy, and retention features present in Smart Form Builder by Dragwyb version 1.3.6. The controls are separate: form-level protection settings do not replace the dedicated CAPTCHA field, and visitor-tracking retention does not automatically define a retention period for every kind of stored data.

Choose the guide for your task

Important implementation notes

In version 1.3.6, the File Upload field shows a 2 MB editor notice, but its server-side validation enforces a 1 MB maximum. The code also advertises DOC and DOCX extensions while the MIME allowlist does not include their common MIME types. The inspected frontend submission handler sends JSON and no upload persistence handler was found in the inspected submission path. Do not rely on this field for production file collection until the implementation has been corrected and tested.

Retention is for visitor analytics records. The default is 0 (keep indefinitely), and the separate entry-retention setting determines whether old submission rows are deleted during tracking cleanup. Review your own legal, privacy, and operational requirements before enabling tracking or choosing a retention period.

Screenshot to add: [Spam, Uploads, and Privacy overview]