Web Applications Stack Exchange is a question and answer site for power users of web applications. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have noticed that Google spreadsheet form's have URLs in the form of http://spreadsheets.google.com/viewform?formkey=.... I don't see anything that relates to the Google account in the URL. There also isn't any information about the Google account that owns the form on the form it self.

This seems like a huge security hole, since anyone can spoof an existing form and pretend to be someone else.

Is there any way to know which Google account is going to get my submitted form data?

Maybe it's embedded on the page somehow? Maybe it can be derived from the URL?

share|improve this question
Google's Picasa does this too, and I'm pretty sure it's intentional. For example, you'd never know the album picasaweb.google.com/113310224845895190889 belonged to me, unless I told you. I'm sure Google knows + would reveal the owner under subpoena or similar legal process. – barrycarter Feb 27 '11 at 15:08

Google Spreadsheet Forms comes under Google Docs.

The form must be shared either with the setting, Public on the Web - it will show up in Google Search results or Anyone who has the link, anyway you cannot find the e-mail address of the owner of the document. As that would be a great security loop-hole on the side of google, anyone will know what company is doing survey on what and stuff like that.

Also, it may be a Google Apps account too.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.