Liuer Contact Form

Liuer Contact Form provides a visual form builder, AJAX submission, optional database storage, file uploads, email notifications, optional SMTP and CAPTCHA adapters.

The plugin does not track visitors or contact an external service by default. CAPTCHA is disabled on each form until an administrator enables it; LCF Captcha is the default provider when enabled. WordPress mail is used unless an administrator explicitly enables and configures SMTP.

LCF Captcha is the built-in, privacy-friendly option. It displays a short numeric challenge and verifies the submitted answer on the server without contacting a third party.

External services

When an administrator selects an external CAPTCHA provider and enables CAPTCHA on a form, the visitor’s browser downloads that provider’s script and the website server sends the challenge response to the provider for verification. Liuer Contact Form does not add a visitor IP parameter. These connections occur only for forms on which CAPTCHA is enabled.

Cloudflare Turnstile is provided by Cloudflare, Inc. Service information: https://www.cloudflare.com/application-services/products/turnstile/ – Terms: https://www.cloudflare.com/website-terms/ – Privacy: https://www.cloudflare.com/privacypolicy/

hCaptcha is provided by Intuition Machines, Inc. Service information: https://www.hcaptcha.com/ – Terms: https://www.hcaptcha.com/terms – Privacy: https://www.hcaptcha.com/privacy

Google reCAPTCHA is provided by Google LLC. Service information: https://www.google.com/recaptcha/about/ – Terms: https://policies.google.com/terms – Privacy: https://policies.google.com/privacy

When an administrator enables SMTP and configures a Host, submitted form data configured for email delivery is sent through that SMTP server.

Email queue

Notification email is stored in a private database queue and delivered asynchronously by WP-Cron. The queue worker does not expose a public REST route or custom web endpoint.

On production VPS hosting, disable traffic-driven cron and run due events once per minute from the system scheduler:

Add define( 'DISABLE_WP_CRON', true ); to wp-config.php only after the system cron command is working.

Failed jobs use increasing retry delays and can be reviewed under Liuer Contact > Email Queue. Manual retries require an authorized administrator and a valid WordPress nonce.

Styling

The plugin loads a complete, responsive default design from assets/css/frontend.css. Themes can customize an individual form with the shortcode class and wrapper_class attributes without editing plugin files.

The wrapper exposes --lcf-primary, --lcf-primary-dark, --lcf-text, --lcf-muted, --lcf-border, --lcf-surface, --lcf-surface-soft, and --lcf-error CSS variables for lightweight branding.

Privacy

Depending on form settings, the plugin may store submitted field values, private upload metadata, the source page and locale. It does not store visitor IP addresses, IP fingerprints, browser details or device information. WordPress personal data export and erase tools are supported. Private files are deleted with their submission. A retention period can be configured.

Failed notification jobs retain their email payload and private attachments for retry until the configured cleanup period, capped at 30 days. Successfully sent payloads are removed immediately.