Legal

Privacy policy

The short version: no cookies, no tracking, no ad tech. We store what you put into forms, plus the minimum we need to keep the service safe.

• No cookies. Your browser keeps your admin keys and your Pro license key in local storage, on your device only.
• Hosted on Cloudflare. Forms and answers live in a Cloudflare D1 database.
• We never store IP addresses in our database, only salted hashes for rate limits and abuse protection.
• Payments for Pro go through Polar, the merchant of record. We never see your card.
• Fonts are self hosted. No requests to third parties when you load a page.

1. Who is responsible

The controller within the meaning of the GDPR for this website and service is:

The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

2. Hosting: Cloudflare

This website, the app, the API and the MCP server run on Cloudflare Workers. Forms, answers and the other data described below are stored in a Cloudflare D1 database. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”).

Every request to this site is technically routed through Cloudflare's network. Cloudflare processes your IP address, the requested URL, the time, your browser's user agent and similar connection data to deliver the page and to protect it against attacks. Cloudflare may keep short lived technical logs for this purpose. We use Cloudflare's Workers logs only to find and fix errors.

The legal basis is our legitimate interest in a secure, fast and reliable service (Art. 6(1)(f) GDPR) and, where you use the service to create or answer forms, the performance of a contract (Art. 6(1)(b) GDPR). We have concluded a data processing agreement with Cloudflare. Transfers to the USA are based on the EU Standard Contractual Clauses; Cloudflare is also certified under the EU-US Data Privacy Framework (DPF). More: cloudflare.com/privacypolicy.

3. What we store, and why

No cookies, local storage only for your keys

We do not set cookies. When you publish a form, your browser saves the form's admin key in its local storage so the form shows up under “My forms”. If you activate Pro, your license key is saved there too. This data never leaves your device unless you use it, for example when you open your admin page or save a form. You can delete it at any time in your browser settings. Storing it is strictly necessary for the function you asked for (§ 25(2) no. 2 TDDDG).

Creating a form

When you create a form (in the editor, through the API or through the MCP server) we store the form content, the theme and settings, the time of creation and a hash of your admin key. We do not keep the admin key itself, so we cannot recover a lost admin link. To enforce the free plan limit of active forms, we store a salted hash derived from your IP address together with the form. We cannot turn this hash back into your IP address. This data is kept until you delete the form. Legal basis: Art. 6(1)(b) GDPR.

Answering a form

When you answer a form, we store your answers and the time. The person who created the form decides what is asked, and the answers are stored for them: for these answers the form creator is the controller and we process them on the creator's behalf (Art. 28 GDPR). Please do not enter more personal data than the form asks for. If you want your answers changed or deleted, contact the form creator, or us if you cannot reach them.

Together with each answer we store a salted hash derived from the form, your IP address and your browser's user agent. It helps us spot duplicate and automated submissions. It cannot be turned back into your IP address. Answers and their hashes are deleted when the form is deleted. If a form creator turns on public results, everyone can see the aggregated results (counts and percentages, never single text answers).

Rate limiting and abuse protection

To stop spam and abuse we count requests per salted IP hash in short time windows. These counters expire automatically after the time window, which is minutes to hours. IP addresses themselves are only processed in memory while your request is handled and are never written to our database. Legal basis: our legitimate interest in a service that is not flooded with spam or used for phishing (Art. 6(1)(f) GDPR).

Abuse reports

If you report a form, we store the form, your reason and the time. We use this only to review the form and take it down if needed. Please do not put personal data into the reason unless it is necessary.

Pro purchases through Polar

Pro is sold by Polar Software, Inc. (“Polar”, polar.sh), who acts as merchant of record. That means Polar is the seller, handles payment, tax and invoices, and processes your payment and contact data under its own responsibility. See Polar's privacy policy. After the purchase you receive a license key. To check it, our server asks Polar whether the key is valid. We store a hash of the key, its status, the time of the last check and Polar's customer ID, so we know which forms belong to a Pro license. Legal basis: Art. 6(1)(b) GDPR.

Statistics

We do not run analytics scripts. If we ever enable Cloudflare Web Analytics, it works without cookies and without storing IP addresses, collects only aggregated page views and loads a script from static.cloudflareinsights.com. We will update this policy before switching it on. Legal basis would be Art. 6(1)(f) GDPR.

Fonts and third parties

All fonts are served from our own domain. Loading a page or a form makes no requests to Google or any other third party.

Contacting us

If you write to us by email, we store your message and contact details to answer you and delete them when the matter is settled, unless statutory retention periods apply. Legal basis: Art. 6(1)(b) or (f) GDPR.

4. Your rights

Within the limits of the law you have the right to:

• access the personal data we hold about you (Art. 15 GDPR),
• have it corrected (Art. 16) or deleted (Art. 17),
• restrict its processing (Art. 18),
• receive it in a common, machine readable format (Art. 20),
• withdraw any consent you gave, with effect for the future (Art. 7(3)),
• lodge a complaint with a data protection supervisory authority (Art. 77), for example the one where you live or the Berlin Commissioner for Data Protection and Freedom of Information.

Right to object (Art. 21 GDPR): where we process data based on our legitimate interest (Art. 6(1)(f) GDPR), you can object at any time for reasons arising from your particular situation. We then stop processing unless we can show compelling legitimate grounds that override your interests, or the processing serves legal claims.

Because we do not run user accounts and only store hashes, we often cannot tell which data belongs to you. Tell us the form link and roughly when you answered it, and we will do our best.

5. Storage periods

Unless stated above, we keep personal data only as long as needed for the purpose it was collected for, or as long as statutory retention periods require.

6. Encryption

This site uses TLS encryption. You can tell by “https://” and the lock symbol in your browser's address bar.

Last updated: October 2026. Deutsche Fassung: Datenschutzerklärung.