Logo Formdam
  • Blog
  • Sign in
Legal

Privacy Policy

Last updated 12 May 2026

Formdam runs a form backend — sites point their HTML forms at us, we capture submissions and forward them. This page explains, in plain English, what we collect, why, and what your options are.

On this page
  1. What we collect
  2. What we do with it
  3. Who else touches your data
  4. Cookies
  5. Retention
  6. Your choices
  7. Children
  8. Changes
  9. Contact

What we collect

  • Account information. When you sign in with Google we receive your name, email, and profile picture from Google. We do not see or store your Google password.
  • Form submissions. Every field that visitors post to one of your form endpoints is stored verbatim. If your form collects email addresses, phone numbers, or other personal data from your visitors, we store that for you.
  • IP address & geolocation. The IP address that submitted a form is stored on the submission. We resolve it to a country using IP2Location LITE so you can see roughly where submissions came from.
  • Billing information. Paid subscriptions are processed by Stripe. We receive a customer id and subscription status from Stripe — we never see card numbers.
  • Operational logs. Server logs (request paths, timestamps, errors) are kept for a short window to debug issues. They are not used for advertising.

What we do with it

  • Deliver the service: store submissions, send notification emails to recipients you configure, render your dashboard and inbox.
  • Bill the right plan to the right account.
  • Detect abuse — rate limiting, locked-account enforcement, anti-spam.
  • Improve the product based on aggregate usage. We do not sell your data.

Who else touches your data

  • Google — sign-in.
  • Stripe — payments and subscription management.
  • Our SMTP provider — notification emails to recipients you configure.
  • Our hosting provider — runs the database and app servers.

Each of these processes data only to deliver the service. None of them receives your submissions for their own use.

Cookies

We set a single first-party cookie — a signed JWT named auth_token — to keep you signed in. We do not run third-party trackers. Google Analytics is loaded for aggregate traffic measurement only.

Retention

  • Submissions: kept while your account is active, subject to the history window of your plan.
  • Account record: kept while the account exists.
  • Deleted accounts and their submissions are removed promptly. Backups age out within 30 days.

Your choices

  • Export your submissions any time as CSV or JSON.
  • Delete individual submissions, forms, projects, or the entire account from the dashboard.
  • Cancel a paid plan via Stripe's customer portal (linked from the menu).
  • Email us at theformdam@gmail.com for anything we don't cover.

Children

Formdam is not directed at children under 13. If you believe a child has signed up, contact us and we'll remove the account.

Changes

If we materially change this policy we'll bump the date at the top and email accounts that have opted in to product updates. Continued use after a change means you accept it.

Contact

Questions? theformdam@gmail.com.

Formdam Catch every form submission.
  • Privacy
  • Terms
IP geolocation by IP2Location LITE.
Navigation
Home Blog