An important part in any system that deals with user-provided content is privacy and data retention. Formie provides a handful of settings for you to manage user submissions. Each setting can be managed per-form (see Forms), where you can opt to retain submission data for a set number of minutes, hours, days, weeks, months or years.
It's currently not possible to completely disable storing user submissions to the database. There are a few reasons for this:
Whilst Ajax-forms are not an issue, Page Reload forms are, in that content needs to be stored from one page request to another. Not to mention when a user refreshes the page, or navigates across multiple pages, their content from previous pages would be gone.
Email Notifications and Integrations can (and should) be run from a queue to prevent delays when users submit the form. However, because the queue system is designed to run in the background, and potentially at some future point in time, we need to store the submission information somewhere in order for the queue job to use that information.
In addition, because both Email Notifications and Integrations can have multiple instances, it becomes difficult to know when all these tasks have been completed. Otherwise, we could make use of knowing when the last task was performed.
As the above explains, there are some caveats to disabling storing of submissions. However, we do have a recommended approach that will store submission data, but for the least amount of time necessary.
Firstly, it's vital that you setup proper queue handling for your site. Our Troubleshooting docs have plenty of options available to you. This is so that the queue jobs are processed in a timely manner.
Secondly, ensure your forms have been set up with an appropriate data retention value. This could be 2 weeks, 24 hours or even 1 minute.
Finally, you'll want to set up an ongoing process that ensures submissions are pruned. Whilst we make use of Craft's Garbage Collection (opens new window), to automatically prune submissions, there's no guarantee these are run in a timely fashion. It is instead much safer to run this cleanup on-demand.
The easiest method is to set up a cron job on your server to ensure submissions are pruned:
*/1 * * * * ./craft formie/gc/prune-data-retention-submissionsThe above command would run every minute around the clock, ensuring submissions are pruned according to your data retention settings, for all forms on your site.
You may also want to disable viewing the Submissions' information in the control panel for your users. You can use the Permissions available to all users to control this by editing their user account.
If you have a short interval set for your data retention, like a few minutes, it's even more important to ensure that your queue is processed in a timely manner. Otherwise, you run the risk of pruning your submissions before Email Notifications or Integrations have run within the queue.
An approach to get around this might be to disable the "Use Queue for Notifications" and "Use Queue for Integrations" plugin settings. While this isn't recommended due to performance issues when completing a form for your users, it's one way to ensure that things are processed immediately, before the data retention rules are triggered.
For an added layer of privacy, you can set any field to have their content encrypted. This means that their content cannot be viewed in its raw form in the database, however the form submission data can still be viewed in the control panel, for authenticated users.