26.1 Overview

The Iframes section allows the card owner to display approved external webpages and web-based tools directly inside the public digital VCard.

Instead of requiring the visitor to leave the card, an iframe can place compatible external content within the VCard page.

Possible uses include:

Iframes are managed through a separate VCard interface with dedicated create, edit, update, and delete operations.

26.2 What Is an Iframe?

An iframe is a webpage displayed inside another webpage.

For example:

The registration form continues to be operated and hosted by its original provider, but visitors can interact with it from within the VCard.

The VCard does not copy the external webpage into the Book system. It stores the destination URL used to load that webpage.

26.3 Iframe Versus Custom Link

Both features can connect visitors to external content.

Iframe

Displays compatible external content inside the VCard.

Custom Link

Sends the visitor to the external page as a separate destination.

Use an iframe when:

1. The provider supports embedding.
2. The content fits comfortably inside the VCard.
3. In-page interaction improves the visitor experience.
4. The external content is responsive on phones.
5. The embedded content does not make the card excessively slow.

Use a Custom Link when:

1. The website blocks iframe embedding.
2. The visitor must sign in.
3. The external page is complex or very long.
4. The page does not work properly on mobile.
5. The page should open at full browser size.
6. The provider recommends using a normal link.

26.4 Iframe Versus Gallery Media

Use the Gallery when the VCard should display:

1. Uploaded images
2. Uploaded video
3. Uploaded audio
4. Documents
5. Supported files
6. YouTube media
7. Organized Gallery Categories

Use an iframe when the content remains an interactive webpage operated by another service.

For example:

26.5 Iframe Versus Instagram and LinkedIn Embeds

Instagram and LinkedIn content have dedicated VCard sections.

Use:

for those supported social posts.

Use Iframes for other compatible webpage sources that do not have their own dedicated VCard feature.

26.6 Iframe Versus the Map Feature

The VCard already provides a dedicated Map control through Basic Details and Manage Section.

Use the normal Map feature for a standard public business location.

Use an iframe only when a different supported mapping experience is required, such as:

1. A custom service-area map
2. A route map
3. An interactive location directory
4. A multi-location map
5. A specialized event map

Avoid displaying the same map through both features unless there is a clear reason.

26.7 Iframe Versus YouTube Features

The VCard already supports YouTube through:

1. Cover media
2. Galleries
3. Other supported video areas

Use those built-in options for ordinary YouTube presentation.

Use an iframe only when a specific compatible embedded video experience cannot be handled through the existing YouTube or Gallery features.

Built-in media features are usually easier to maintain.

Opening the Iframes Section

26.8 Opening Iframes

From the dashboard:

1. Select VCards.
2. Locate the digital card you want to update.
3. Select the card name or the Edit icon.
4. Select Iframes from the VCard editor menu.

On a phone or smaller screen, select the menu icon inside the editor before choosing Iframes.

The Iframes menu entry opens the dedicated iframe-management interface for the selected VCard.

26.9 Understanding the Iframes Screen

The Iframes screen contains:

Each saved entry represents one external URL.

The management actions use:

The interface does not provide a separate View-details action. Public testing is performed by opening the VCard.

26.10 Multiple Iframes

A VCard can contain more than one iframe record.

For example:

Use multiple iframes cautiously. Each additional external page can increase loading time and make the public card substantially longer.

Understanding the URL Field

26.11 One Required Field

The New Iframe form contains one required content field:

The form also contains:

The URL connects the iframe record to an external webpage.

There is no separate field for:

The selected VCard template controls the public iframe presentation.

26.12 Enter the Iframe Source URL

The field is intended for the webpage address that should load inside the iframe.

Example:

Use the complete secure address whenever available.

Do not enter only:

Use:

26.13 Enter the URL, Not the Entire Iframe Code

Many external services provide code similar to:

The VCard form asks for the URL, not the complete HTML code.

From the example above, enter only:

Do not paste:

The VCard creates the iframe presentation using the saved URL.

26.14 Finding the URL Inside Embed Code

When a provider supplies a complete iframe code:

1. Locate src=.
2. Find the address between the quotation marks.
3. Copy only that address.
4. Paste it into the VCard URL field.
5. Save the iframe.
6. Test it publicly.

Example:

Copy:

26.15 Use the Provider’s Embed Address

A provider may offer both:

Example:

The embed version is generally more likely to work correctly inside an iframe.

A normal page may include menus, headers, popups, or security restrictions that make it unsuitable for embedded display.

26.16 Secure HTTPS Addresses

The public VCard uses a secure HTTPS connection.

Use an iframe source beginning with:

An insecure source beginning with:

may be blocked by the visitor’s browser because secure pages commonly refuse to load insecure embedded content.

This is known as mixed-content blocking.

26.17 Public Accessibility

The iframe URL should be accessible to the intended visitors.

Before saving it:

1. Open a private browser window.
2. Paste the URL.
3. Confirm that the page loads.
4. Confirm that no administrator session is required.
5. Confirm that the content belongs to the correct organization.
6. Confirm that the page is intended for public display.

Do not use an address that works only because the administrator is already signed in.

26.18 Do Not Use Administrative URLs

Do not iframe:

These pages may expose management controls or fail for public visitors.

Use the provider’s public viewing, sharing, publishing, or embed address.

26.19 Do Not Include Credentials in the URL

Never save a URL containing:

Some shared URLs include long access tokens. Confirm that the provider specifically created the address for public or controlled visitor use before adding it.

Suitable Iframe Content

26.20 Public Forms

Iframes can be used for compatible:

Before embedding a form, confirm that:

1. The form is published.
2. The intended audience has access.
3. The correct organization receives submissions.
4. Required fields work.
5. A success confirmation appears.
6. The form fits on a phone.
7. The Privacy Policy addresses the information collected.

26.21 Public Calendars

A compatible public calendar may display:

1. Events
2. Training schedules
3. Office availability
4. Workshop dates
5. Public meeting times
6. Program deadlines
7. Class schedules

Do not iframe a private internal calendar.

Confirm that the published calendar does not reveal:

1. Private meeting details
2. Personal attendee names
3. Confidential locations
4. Internal notes
5. Private video-meeting links

26.22 External Scheduling Tools

A compatible scheduling tool may allow visitors to:

1. Select an appointment type
2. Choose a date
3. Choose a time
4. Enter contact information
5. Confirm a meeting

The VCard also has its own Appointments feature. Use the built-in Appointments section when it satisfies the business’s booking needs.

Use an external scheduling iframe when a separate approved system must remain part of the workflow.

Avoid displaying both booking systems unless visitors can clearly understand which one to use.

26.23 Maps

A provider-supported map embed may display:

1. One business location
2. Several locations
3. A service area
4. An event venue
5. Parking information
6. A travel route
7. A custom geographic presentation

The iframe should use the provider’s official embed URL rather than the ordinary map-browser address.

26.24 Videos

A compatible video embed may be used for:

1. Company introductions
2. Product demonstrations
3. Course previews
4. Event recordings
5. Instructions
6. Customer education

Before using an iframe, review whether the Gallery or built-in YouTube options provide a better experience.

26.25 Public Documents

A compatible public document viewer may display:

1. Program brochures
2. Reports
3. Schedules
4. Catalogs
5. Presentations
6. Public guides
7. Policies
8. Course previews

Confirm that:

1. The document is publicly viewable.
2. Editing access is not granted.
3. Private comments are removed.
4. The document is readable on a phone.
5. The external provider permits iframe display.

Use the Gallery when uploading the document directly is more appropriate.

26.26 Public Calculators and Tools

An iframe may display an approved:

Test every input and result carefully.

Do not embed a calculator that makes misleading promises or collects information without an appropriate notice.

26.27 Public Dashboards

A public dashboard may display:

1. Public statistics
2. Program outcomes
3. Event progress
4. Community data
5. Public reporting
6. Campaign results

Do not embed a dashboard containing confidential customer, employee, student, financial, or operational information.

26.28 Donation and Payment Forms

A secure approved provider may offer an embeddable donation or payment form.

Before using one:

1. Confirm that the provider is authorized.
2. Confirm that the page uses HTTPS.
3. Confirm that the business name is correct.
4. Confirm that the correct account receives funds.
5. Review the payment and refund information.
6. Update the Privacy Policy and Terms where necessary.
7. Complete only controlled authorized tests.

The VCard also provides Payment Links. Use the dedicated Payment Links feature when it better fits the payment process.

Adding an Iframe

26.29 Opening the New Iframe Form

Select Add Iframes.

The New Iframe window opens.

It contains:

The selected VCard is attached to the new iframe automatically.

26.30 Entering the URL

Paste the complete iframe-compatible source address into the URL field.

Example:

Review the address for:

1. Correct domain
2. Correct path
3. Secure HTTPS
4. No accidental spaces
5. No surrounding quotation marks
6. No HTML tags
7. No private tokens
8. No administrator path

26.31 Removing Quotation Marks

When copying from embed code, do not include quotation marks.

Incorrect:

Correct:

Also remove trailing HTML such as:

26.32 Reviewing Before Save

Before selecting Save, confirm that:

26.33 Saving the Iframe

Select Save.

When the iframe is created successfully:

1. A success message appears.
2. The New Iframe window closes.
3. The Iframes list refreshes.
4. The new record appears.
5. The Save button is protected from repeated submission while processing.

The application has a dedicated route for creating each iframe record.

26.34 Using Discard

Select Discard to close the New Iframe window without saving.

Discard does not affect existing iframe records.

The unsaved URL must be entered again when the form is reopened.

Testing the New Iframe

26.35 Enable Iframes in Manage Section

Creating an iframe record does not replace the need to confirm public section visibility.

To display Iframes:

1. Open the VCard editor.
2. Select Manage Section.
3. Locate Iframes.
4. Select its checkbox.
5. Select Save.
6. Open the public VCard.

Manage Section includes a dedicated iframe visibility control.

26.36 Open the Public VCard

After saving the iframe and enabling its section:

1. Return to VCards.
2. Open the public card.
3. Scroll to the iframe area.
4. Confirm that the external page loads.
5. Test its controls.
6. Repeat the test on a phone.
7. Repeat it in a private browser window.

The management screen alone does not confirm that the external provider permits public embedding.

26.37 Test the External Function

The required test depends on the embedded content.

Form

Submit an authorized test and confirm receipt.

Calendar

Open dates and confirm that the correct schedule appears.

Video

Start, pause, and expand the video where supported.

Document

Scroll, zoom, and open pages.

Calculator

Enter test values and review the result.

Map

Move, zoom, and confirm the location.

Scheduling Tool

Complete the process without creating an unintended real appointment.

26.38 Test Completion Messages

When visitors submit an embedded form, confirm that they receive a clear result such as:

Avoid embedding a process that leaves visitors unsure whether it succeeded.

26.39 Verify the Receiving System

A form appearing to submit does not guarantee that the organization received it.

Confirm that the submitted information appears in the correct:

1. Email inbox
2. Form dashboard
3. CRM
4. Scheduling system
5. Payment account
6. Registration system
7. External database

Remove authorized test records afterward when appropriate.

Editing Iframes

26.40 Opening the Edit Form

Select the Edit pencil icon beside the iframe you want to change.

The Edit Iframe window opens and loads the existing URL.

The application retrieves the selected record before displaying it for editing.

26.41 Updating the URL

Replace the URL when:

1. The provider changed its embed address.
2. A form was replaced.
3. A campaign ended.
4. A new calendar was published.
5. A document was updated.
6. The previous page was deleted.
7. The business changed providers.
8. The existing page began blocking embedding.
9. A testing address must be replaced with the production address.

26.42 Confirm the Correct Record

Because each iframe record contains only a URL, examine the complete address before changing it.

Confirm that the selected record belongs to the correct:

1. Form
2. Calendar
3. Video
4. Document
5. Map
6. Tool
7. Campaign
8. Department

Do not replace the wrong iframe accidentally.

26.43 Saving the Updated Iframe

After replacing the address:

1. Review the complete URL.
2. Select Save.
3. Wait for the update confirmation.
4. Confirm that the Edit window closes.
5. Open the public VCard.
6. Test the replacement content.

The application maintains a separate update operation for existing iframe records.

26.44 Using Discard During Editing

Select Discard to close the Edit Iframe window without applying the current change.

The previously saved URL remains stored.

Deleting Iframes

26.45 Deleting an Iframe

Select the Delete trash icon beside the iframe record.

Review the confirmation and approve the deletion.

Deleting the record removes:

It does not delete the original external form, webpage, document, video, calendar, or account.

26.46 Delete Versus Hide

Use Delete when:

1. The external page should no longer be connected.
2. The URL is incorrect.
3. The form was created by mistake.
4. The source is unsafe.
5. The content belongs to the wrong card.
6. The provider account was discontinued.
7. The record is duplicated.

Use Manage Section when:

1. All iframes should be hidden temporarily.
2. External content is under review.
3. The card is being redesigned.
4. A provider outage is temporary.
5. The stored iframe records may be needed again.

Hiding the section preserves the iframe records. Deleting removes an individual record.

26.47 No Individual Active Switch

The iframe interface does not provide a separate:

switch for each record.

An individual iframe is either stored or deleted.

Manage Section controls the visibility of the complete iframe area.

26.48 No Restore Control

The Iframes screen does not provide a visible recycle bin or restore option.

Before deleting:

1. Copy the URL.
2. Record the provider.
3. Record the iframe’s purpose.
4. Confirm that the correct record is selected.
5. Confirm that the external content is no longer needed.

A deleted iframe must be recreated manually.

Public Visibility

26.49 Showing the Complete Iframe Section

To show all saved iframe records:

1. Open Manage Section.
2. Select Iframes.
3. Select Save.
4. Refresh the public VCard.

The saved iframe records remain managed through the Iframes editor, while Manage Section controls whether the section is publicly available.

26.50 Hiding the Complete Iframe Section

To hide all iframes:

1. Open Manage Section.
2. Clear Iframes.
3. Select Save.
4. Refresh the public card.
5. Confirm that the iframe content is gone.

The iframe URLs remain saved and can be displayed again later.

26.51 Empty Iframe Section

Avoid enabling Iframes when no records exist.

Depending on the selected template, an empty section may:

1. Display nothing
2. Create unnecessary spacing
3. Produce an incomplete-looking area

Create and test the iframe before enabling the section publicly.

26.52 No Separate Section Title Field

The Iframes editor does not provide a public section-title field.

The selected template determines whether a heading such as Iframes appears.

When visitors need an explanation, use an appropriate nearby section such as:

1. Banner
2. Blog
3. Basic Description
4. Custom Link
5. Service
6. External page content

For example, a Blog can explain the purpose of an application form before visitors use the embedded form.

Iframe Appearance

26.53 Template-Controlled Presentation

The iframe form does not provide controls for:

The selected VCard template controls the available display area.

The external webpage controls its own internal design.

26.54 External Page Design

The VCard cannot fully redesign the content loaded from another domain.

The embedded page may use its own:

1. Fonts
2. Colors
3. Buttons
4. Spacing
5. Navigation
6. Mobile layout
7. Popups
8. Cookie notices
9. Language
10. Accessibility controls

VCard Font, Dynamic VCard, and Custom CSS settings generally cannot redesign the inside of an external cross-domain iframe.

26.55 Height and Scrolling

When the external page is taller than the iframe area, visitors may need to scroll inside the embedded frame.

This can create:

Double scrolling can be difficult on a phone.

Use a compact, mobile-friendly embed page whenever possible.

26.56 Width and Mobile Responsiveness

The external page should be responsive.

A nonresponsive embedded page may:

1. Extend beyond the screen
2. Display horizontal scrolling
3. Cut off form fields
4. Hide buttons
5. Make text too small
6. Prevent visitors from completing the process

Test the iframe on a phone before publishing the card.

26.57 No Manual Sort Control

The iframe form does not provide a visible:

control.

When several iframes exist, review their public sequence after creation and after template changes.

Avoid relying on an exact order unless it has been tested.

26.58 External Popups and New Windows

Some embedded pages open:

1. Popups
2. Payment windows
3. Authentication windows
4. File downloads
5. New browser tabs

Browser security settings may block or alter these actions.

Test every critical action from the public VCard rather than testing only the original external page.

Embedding Restrictions

26.59 Not Every Website Can Be Embedded

A website owner can prevent its pages from appearing inside an iframe.

When embedding is blocked, visitors may see:

This does not necessarily mean the VCard is broken.

The external provider may be refusing iframe display.

26.60 Frame-Security Restrictions

External sites can use browser security controls such as:

These controls determine whether another website may display the page inside a frame.

The VCard owner usually cannot override those restrictions.

Use:

1. The provider’s official embed URL, or
2. A Custom Link to the normal external page

when embedding is blocked.

26.61 Normal Page Works but Iframe Does Not

A page can open normally in a browser tab while refusing to appear inside an iframe.

This is expected when the provider permits direct visits but prohibits embedded display.

Testing the URL directly is necessary but not sufficient. The final public VCard must also be tested.

26.62 Login Pages

Login systems frequently restrict iframe use for security reasons.

Even when a login page appears, it may fail because of:

1. Third-party cookie restrictions
2. Authentication redirects
3. Frame-security rules
4. Multifactor authentication
5. Popup blocking
6. Provider policy

Use a Custom Link for customer portals and account logins when iframe behavior is unreliable.

26.63 Payment Pages

Payment providers may prohibit or tightly control iframe display.

Use only the provider’s officially supported embedded checkout option.

Do not place an ordinary payment-login or merchant-administration page inside the VCard.

When iframe payment behavior is uncertain, use the VCard’s Payment Links feature or an approved external checkout link.

Performance

26.64 Iframes Can Slow the VCard

Each iframe loads an external webpage, including its:

1. Images
2. Scripts
3. Fonts
4. Videos
5. Analytics
6. Cookies
7. Styles
8. Advertisements where applicable

Several iframes can make the VCard slower than a card containing only standard content.

26.65 Limit the Number of Iframes

Use only the iframes that serve an important visitor purpose.

Instead of embedding:

consider using:

1. One primary iframe
2. Custom Links for supporting destinations
3. Galleries for media
4. Blogs for explanations
5. Built-in Appointments where possible

26.66 Review Mobile Data Usage

Embedded video, maps, and dashboards may use substantial mobile data.

Avoid automatically loading heavy content unless it provides meaningful value.

A Custom Link may be more appropriate when the visitor should choose whether to load a large external resource.

26.67 External Provider Outages

The VCard may remain online while the iframe appears unavailable because the external provider is experiencing an outage.

When the provider fails:

1. Other VCard sections may continue working.
2. The iframe may remain blank.
3. Forms may stop submitting.
4. Videos may not load.
5. Calendars may display an error.

Maintain an alternate contact or Custom Link when the iframe supports an important business process.

Privacy and Security

26.68 Third-Party Data Collection

An embedded webpage may collect information independently of the VCard.

Possible information includes:

Review the external provider’s practices before embedding its page.

26.69 Update the Privacy Policy

Review the VCard Privacy Policy when an iframe:

1. Collects personal information
2. Sets cookies
3. Uses analytics
4. Processes payments
5. Schedules appointments
6. Creates user accounts
7. Transfers information to another provider
8. Loads social or advertising technology

Explain the external provider and information practices accurately where appropriate.

26.70 Terms and Conditions

Review the VCard Terms and Conditions when the iframe allows visitors to:

1. Apply
2. Register
3. Purchase
4. Book
5. Donate
6. Submit content
7. Access digital services
8. Enter a contractual relationship

The iframe provider may also have its own terms.

26.71 Trusted Sources Only

Do not embed pages from unknown or unverified sources.

An external page can change after it has been embedded.

A previously safe page could later:

1. Redirect visitors
2. Display misleading information
3. Request unexpected information
4. Show inappropriate content
5. Become controlled by another owner
6. Present malware or browser warnings

Review every iframe source regularly.

26.72 Domain Ownership Changes

A domain may expire or be sold.

When that happens, an old iframe URL could begin displaying unrelated content.

Periodically confirm that:

1. The domain remains active.
2. The correct organization controls it.
3. The page still serves the original purpose.
4. No unexpected redirect occurs.
5. The security certificate remains valid.

26.73 Avoid Sensitive Internal Content

Do not embed:

Use an appropriately secured system instead.

Accessibility

26.74 Provide Context for Visitors

Because the iframe record does not include its own title or description field, visitors may need surrounding information explaining:

1. What the content is
2. Why it is present
3. What action to take
4. What information is required
5. Whether the content is operated by another provider

Use another VCard section to provide that context when necessary.

26.75 Keyboard Testing

Test whether a visitor using a keyboard can:

1. Reach the iframe.
2. Enter the embedded content.
3. Move between fields.
4. Select buttons.
5. Exit the iframe.
6. Continue through the VCard.

Poorly designed iframe content can trap keyboard navigation.

26.76 Screen-Reader Considerations

The accessibility of the embedded page is primarily controlled by the external provider.

Before publishing, confirm where possible that:

1. Form fields have labels.
2. Buttons have understandable names.
3. Error messages are clear.
4. Headings are logical.
5. Instructions are available.
6. Color is not the only communication method.

Use a normal Custom Link when the embedded experience is not accessible.

26.77 Language Consistency

An iframe may use a language different from the VCard.

Confirm that:

1. The intended language is selected.
2. Visitors understand the embedded instructions.
3. Date formats are appropriate.
4. Currency is correct.
5. Form confirmation messages use the correct language.
6. Translated VCard versions do not open the wrong-language form.

Duplicated VCards

26.78 Review Iframes After Duplication

Iframe relationships are included among the VCard content considered during the duplication process.

After duplicating a card:

1. Open the duplicate.
2. Select Iframes.
3. Review every saved URL.
4. Remove forms belonging only to the original cardholder.
5. Replace personal calendar or scheduling URLs.
6. Review external documents.
7. Confirm that the new department receives submissions.
8. Review Manage Section.
9. Test the duplicate publicly.

Do not publish a duplicated card that sends information to the original person’s account.

26.79 Common Duplication Risks

A copied iframe may continue directing submissions to:

The public appearance may look correct while the information is delivered to the wrong destination.

Always submit an authorized test after duplication.

Maintaining Iframes

26.80 Keep an External Iframe Register

Maintain a business record containing:

This is especially important because the Iframes screen itself stores only the URL.

26.81 Review Time-Sensitive Iframes

Record a removal or review date for:

1. Event registration
2. Applications
3. Surveys
4. Temporary calendars
5. Limited-time promotions
6. Seasonal forms
7. Campaign dashboards
8. Short-term donation drives

The iframe feature does not provide automatic expiration.

26.82 Review After Provider Changes

Update the iframe when the business changes:

1. Form provider
2. Scheduling provider
3. Payment provider
4. Document host
5. Video platform
6. Calendar account
7. Website domain
8. External dashboard

Delete old records after the replacement has been tested.

26.83 Review After Template Changes

After selecting another VCard template:

1. Open the public card.
2. Locate every iframe.
3. Review width and height.
4. Test scrolling.
5. Test mobile display.
6. Test all form controls.
7. Confirm that the section remains enabled.
8. Confirm that the iframe does not cover other content.

Troubleshooting

26.84 The Iframe Will Not Save

Confirm that:

1. The URL field is completed.
2. The address was entered inside the URL field.
3. Save was selected only once.
4. The browser session remains active.
5. The internet connection did not stop.
6. The correct VCard is being edited.
7. The address does not contain accidental HTML.

26.85 The URL Is Invalid

Review the address for:

1. Missing https://
2. Spaces
3. Quotation marks
4. Incomplete domain
5. Duplicated protocol
6. Copied HTML
7. Extra punctuation
8. Line breaks
9. Expired token

Correct:

Incorrect:

26.86 “Refused to Connect”

This usually means the external website does not permit iframe display.

Resolution:

1. Confirm that the correct embed URL was used.
2. Look for an official embed or publish option from the provider.
3. Test the embed URL in the VCard again.
4. Use a Custom Link when the provider continues blocking the iframe.

The VCard cannot force another website to permit embedding.

26.87 Blank Iframe Area

Possible causes include:

1. Provider blocking
2. Insecure HTTP source
3. Expired page
4. Private content
5. Browser privacy settings
6. Provider outage
7. Incorrect URL
8. JavaScript error inside the external page

Open the source directly and test the public VCard in another browser.

26.88 The Page Loads Directly but Not in the VCard

This strongly suggests an embedding restriction.

Use the provider’s official embed URL or replace the iframe with a Custom Link.

26.89 The Iframe Does Not Appear Publicly

Confirm that:

1. The record was saved.
2. Iframes is enabled in Manage Section.
3. The VCard is active.
4. The correct card was edited.
5. The public page was refreshed.
6. The selected template presents the iframe section.
7. The browser is not showing cached content.
8. The source provider permits embedding.

26.90 The Iframe Is Too Small

The Iframe form does not provide a height or width field.

Possible solutions include:

1. Use a more compact provider embed.
2. Shorten the external form.
3. Use the provider’s responsive layout.
4. Select a different VCard template.
5. Use a Custom Link to open the full page.
6. Ask a qualified developer to review supported template styling.

Do not use untested Custom CSS that affects the complete card.

26.91 The Iframe Is Too Tall

A very long iframe can make the VCard difficult to navigate.

Consider:

1. Dividing a long form into steps
2. Using a shorter external page
3. Replacing the iframe with a Custom Link
4. Embedding only the most important interactive resource
5. Removing duplicate or unnecessary content

26.92 Horizontal Scrolling Appears

The external page may not be mobile responsive.

Test whether the provider offers:

1. Responsive embed mode
2. Mobile embed URL
3. Width set to 100%
4. Compact form layout

When the provider cannot supply a responsive version, use a Custom Link.

26.93 Visitors Cannot Submit the Form

Confirm that:

1. Every required field is visible.
2. The Submit button is accessible.
3. Cookies are not blocked.
4. The provider is online.
5. The form is accepting responses.
6. The visitor does not need an unavailable login.
7. The form works in a normal browser tab.
8. The correct embed URL was used.

26.94 Submission Is Not Received

Review the external form system.

Confirm that:

1. The form belongs to the correct account.
2. Response collection is enabled.
3. Notifications are configured.
4. The receiving email is correct.
5. The CRM integration is active.
6. Spam filters are not blocking notifications.
7. The authorized test was fully submitted.

The VCard displays the form but does not control the external provider’s response storage.

26.95 Login Loop Inside the Iframe

This can occur when the provider depends on cookies or security methods that do not work inside an iframe.

Use a Custom Link so the visitor can open the login process directly in a full browser tab.

26.96 Insecure Content Warning

Replace an http:// iframe URL with the secure https:// version.

When the provider does not support HTTPS, do not embed it in the secure VCard.

26.97 The Wrong External Page Appears

Open the Edit form and inspect the URL.

Confirm that:

1. The correct account supplied the address.
2. A preview page was not used accidentally.
3. A form editor was not copied.
4. The provider is not redirecting the old URL.
5. The correct iframe record was edited.
6. A duplicate iframe does not exist.

26.98 Old Content Still Appears

The external provider may cache content.

After updating:

1. Confirm that the new URL was saved.
2. Reopen the Edit form.
3. Refresh the public VCard.
4. Test in a private browser window.
5. Clear the browser cache.
6. Open the source directly.
7. Confirm that the provider has published the updated content.

26.99 A Deleted Iframe Still Appears

Confirm that:

1. The delete confirmation succeeded.
2. The record is no longer in the Iframes list.
3. The public page was refreshed.
4. The correct VCard was edited.
5. A duplicate iframe does not exist.
6. Similar content is not being displayed through Map, Gallery, Banner, or another embed section.
7. The browser is not showing a cached page.

26.100 Iframes Look Different After a Template Change

This is expected because the template controls the public container.

Review:

1. Width
2. Height
3. Spacing
4. Scrolling
5. Section position
6. Mobile behavior
7. Interaction with nearby sections

Replace or remove any iframe that no longer provides a usable experience.

26.101 The Public Card Loads Slowly

Temporarily hide Iframes through Manage Section.

When performance improves, review:

1. Number of iframe records
2. Large videos
3. Heavy dashboards
4. External advertisements
5. Slow provider servers
6. Unnecessary scripts
7. Duplicate embedded content

Restore only the essential iframe records.

26.102 Iframe Checklist

Before completing the Iframes section, confirm that:

1. Every iframe has a clear business purpose.
2. The correct public source URL is used.
3. Only the URL was entered, not complete iframe HTML.
4. Every address uses HTTPS where available.
5. Every source permits embedding.
6. No administrative page is embedded.
7. No password, token, or credential is exposed.
8. Every external page belongs to a trusted provider.
9. Forms deliver submissions to the correct account.
10. Payment and donation content uses an approved provider.
11. Privacy Policy and Terms were reviewed.
12. Iframes is enabled intentionally in Manage Section.
13. The complete section was tested publicly.
14. Every iframe works on desktop and mobile.
15. Private-browser testing was completed.
16. Scrolling remains usable.
17. The VCard does not contain unnecessary heavy iframes.
18. Time-sensitive records have review dates.
19. Duplicated VCards use the correct external destinations.
20. Important iframe URLs are documented externally.
21. Broken and outdated records were deleted.

Chapter Completion

At the end of this chapter, the user should understand how to add, edit, test, display, hide, and delete VCard iframes; identify valid embed URLs; distinguish an iframe from a Custom Link or Gallery item; manage embedding restrictions; and protect visitor security, privacy, and usability.