How to secure sensitive form data in databases
Contact form submissions accumulate high-liability personal data like names, phone numbers, and free-text messages that site owners rarely need to query. Because forms automatically collect this information and nobody ever deletes it, sites are left holding sensitive records they never actually wanted.
What people tried
Every workaround mentioned in the threads below. We haven’t tested any of them — and nobody here is claiming they worked.
- 1Leaving form entries sitting in the database in plaintext indefinitely
- 2Relying on standard server-side security or host-level protections
In their words
Unedited, most upvoted first, each linked to the thread it came from.
“Form submissions, and I don't think it's close.”source ↗
“It is the highest-liability data on most sites — names, phone numbers, and whatever people type into a free-text "message" box — and it is the one place where "you can't query it" costs approximately nothing.”source ↗
“Most site owners never wanted that data, they just have it because a form put it there and nobody ever made the decision to delete it.”source ↗
Where this came up
People with this problem also raised
- 5How to use AI for accounting without breaking client confidentiality
- 2Why is rushed custom software so insecure?
- 2Accidentally sent confidential internal email to the wrong person
- 4Why does a CRM get so messy as outbound volume grows?
- 2How to stop manually moving numbers from PDFs into Excel
- 2How to find what consent data lead capture forms actually store