Submissions, files and privacy tools

With Log submissions in WP admin on (the default), each entry is saved privately in your own database. Open Rawnaq → Form Submissions.

The submissions screen

• Filter by form, read or unread status and date range.
• Search across every field value.
• Open an entry for fields, files and signatures, the delivery log, campaign details (UTM) and the consent record.
• Mark an entry read or unread, and add a private admin note.
• Export to CSV for the filtered list. The export protects against spreadsheet formula injection.

Files and signatures

Uploaded files go to a protected folder, uploads/rawnaq-forms/, with a random name prefix, and only logged-in admins can download them. SVG, HTML, PHP, executable and script files are always refused. A signature is saved as a PNG file in the same folder, not as text in the database or in an email.

Personal data requests

Rawnaq adds exporter and eraser tools to WordPress core. Use Tools → Export Personal Data or Tools → Erase Personal Data with the person’s email address to find or remove their entries.

Retention

Entries stay until you delete them. Rate-limit data stores only a salted hash of the IP address in short-lived transients, never the raw IP. See Privacy and data.