Privacy and Security
Global Settings › Privacy & security controls the visitor’s country, blocking, IP privacy, consent records and the audit log.
Visitor country
FormGlut needs the visitor’s country for country restrictions, moderation rules and tax. It never asks a remote service. Choose how to Find the visitor’s country from:
| Option | Use it when |
|---|---|
| CDN header (Cloudflare, CloudFront …) | Your site runs behind a CDN that adds a country header. |
| A country database on this site | You upload a free database file. |
| Off | You do not need countries. |
Upload a country database
- Download a free
.mmdbcountry database: MaxMind GeoLite2 Country or DB-IP IP to Country Lite. - Under Country database, click Upload .mmdb file.
- The screen shows the file and a test: Your IP … → country: ….
Blocking
| Setting | What it does |
|---|---|
| Block these countries on every form | Country codes blocked site-wide. |
| Block these IP addresses / ranges | One per line. CIDR is allowed: 203.0.113.0/24, 2001:db8::/32. |
Per-form country rules are in each form’s Settings › Restrictions.
IP privacy
Anonymise IP addresses in entries stores IP addresses with the last part removed (WordPress’s own anonymising), so they no longer identify a single device.
Consent records
Keep a consent record (GDPR / terms checkboxes) saves proof of consent for GDPR Agreement and Terms & Conditions fields, so you can show when and how someone agreed.
Audit log
| Setting | What it does |
|---|---|
| Audit log: exports, edits, deletions, settings | Records who did what, shown in Data & Logs › Activity with the user and IP. |
| Also log when an entry is opened | Records every time someone views an entry. |
See also Data Retention Rules.