FormSync – Google Sheets Connector for Contact Form 7

FormSync adds each successful Contact Form 7 submission as a new row in a Google Sheets worksheet you choose. Every form can use its own spreadsheet and worksheet.

Features

• A “Google Sheets” tab in the Contact Form 7 editor for each form.
• Secure sign-in with a Google service account. The key file is validated, stored encrypted and never shown again.
• Pick spreadsheets and worksheets from dropdowns, or enter a spreadsheet ID or link manually.
• Automatic header row creation. Existing headers are never overwritten or reordered.
• Optional “newest first” row order: each submission is inserted directly below the header row, so the latest entry is always on top. You can keep extra title rows (or the sheet’s frozen rows) above new submissions.
• Field mapping: automatic matching by name, or manual column names, per-field on/off and column ordering.
• Optional metadata columns: submission date and time, IP address, user agent, page URL, post details, site details and logged-in user details. Nothing extra is collected unless you enable it.
• Checkbox and multi-select values are stored as “Option A, Option B”.
• File fields: file name only, a link to a copy of the file, or both.
• Formula-injection protection: values starting with =, +, -, @ or a tab/line break are stored as plain text.
• A failed sync never breaks the form: visitors still see the normal success message and the failure is logged.
• Duplicate protection: the same submission is never added twice to the same sheet.
• Error Logs screen with safe diagnostic information only, plus an optional debug mode.
• Connection tests for the Google account, spreadsheet and worksheet.

Trademarks

FormSync is an independent plugin. It is not affiliated with, endorsed by or sponsored by Google LLC or the Contact Form 7 project. Google Sheets and Google Drive are trademarks of Google LLC. Contact Form 7 is developed by Takayuki Miyoshi. These names are used only to describe what the plugin works with.

What is never logged

Submitted values, passwords, file contents, the service-account private key and access tokens are never written to the logs. Logs only contain the form, spreadsheet, worksheet, error type, HTTP status, a message and field names.

External services

This plugin connects to Google APIs to send form submissions to Google Sheets. It only contacts Google when an administrator configures or tests a connection in wp-admin, and when a visitor submits a Contact Form 7 form that has a Google Sheets integration enabled. Front-end pages never contact Google.

• Google OAuth 2.0 token service (https://oauth2.googleapis.com/token): used to obtain a short-lived access token. It receives a request signed with your service account’s private key (the key itself is never sent) and the requested permissions (Google Sheets and read-only Drive metadata).
• Google Sheets API (https://sheets.googleapis.com): used to read spreadsheet and worksheet details, read the header row, create missing headers and append rows. When a form is submitted, the values of the fields and metadata you mapped for that form are sent to the spreadsheet you selected.
• Google Drive API (https://www.googleapis.com): used only to list the spreadsheets shared with the service account (names and IDs) so you can pick one from a dropdown.

These services are provided by Google LLC: Google Terms of Service, Google Privacy Policy, Google APIs Terms of Service.

Privacy

Form submissions are sent to the Google spreadsheet you choose. Make sure your site’s privacy policy tells visitors that their submissions are stored in Google Sheets.

Metadata such as IP address, user agent or logged-in user details is only sent when you enable those columns for a form.

When a file field uses a link option, a copy of each uploaded file is stored in wp-content/uploads/skfss-uploads/ inside a folder with a random, unguessable name, and anyone with the link can open it. Choose “File name only” for sensitive documents.

The plugin keeps a record of synced submissions (a one-way hash, the integration and the status, no submitted values) for 90 days to prevent duplicate rows.