Jotform

How to count Jotform submissions as conversions in OrcLink. Tested against a copy of Jotform's form markup and submit behaviour (app/api/capture/__tests__/fixtures/builders/jotform.html, test app/api/capture/__tests__/tjs/builders.test.ts). Limits of that test: it is a copy of the markup and of the submit flow as documented, not the live builder; no Shadow DOM; the builder re-rendering the form is not modelled. Check your own page with the test tool.

Set up

1. Add the OrcLink script to the page that shows the Jotform embed (Conversions > Install). You do not need the script inside the Jotform form.
2. In Capture > Rules, under Iframe form vendors, turn on Jotform.
3. Publish.

The script listens for Jotform's own "submission-completed" message, accepted only from https://form.jotform.com, https://submit.jotform.com, https://www.jotform.com, https://hipaa.jotform.com, https://eu.jotform.com, https://form.jotformeu.com. It reads only that signal: no field of the form, no answer, no id. It then records one form conversion for the visitor's click (olid).

Other paths for Jotform:

• Redirect to your own thank-you page after the submit, and add a thank-you page rule (Capture > Rules) for it. Map URL parameters to order_id or email only if Jotform adds them; an email or phone parameter is removed from the address at once.
• If you can put the OrcLink script inside the form page itself (some plans allow custom code), it captures like any form on your site and gets the click id from the page around it (the frame handshake).

Notes

• Jotform HIPAA forms (hipaa.jotform.com) are on the list. The answers stay with Jotform; OrcLink gets only "a form was submitted".
• Jotform's "source code" embed puts the form in your page: then use form capture with the selector form.jotform-form instead of the vendor switch.

Check it

1. Open Capture > Test tool in OrcLink and turn test mode on (or add data-orc-test to the script tag on a test copy of the page).
2. Open the page from an OrcLink link (so the address has ?olid=), fill in the form and send it.
3. Within a few seconds the test tool shows one row: kind, the field NAMES read and hashed (email, phone), match "click id", outcome "Yes". It never shows values.
4. Turn test mode off. Test outcomes are never sent to an ad platform.

Privacy

• The script reads only the first email-shaped and the first phone-shaped field of the form. Names, messages, dates of birth, insurance and every other field stay in the page. The server hashes the email and phone on arrival and never stores them raw.
• Nothing is read or sent before the visitor gives advertising consent (when the workspace follows the consent manager). In HIPAA mode the same rules hold; hashes only.