Forms
Form privacy
Privacy-first: We don't permanently store your form responses. Responses are processed temporarily and sent directly to the form owner's email.
This page describes the form product only. Site-wide analytics and ads are covered in the Privacy Policy.
What we do
- The form definition lives in an encrypted token in the share URL (AES-256-GCM), so the link opens on any visit. We do not look it up in a database. Answers are not stored.
- When someone joins, name, email, phone, and problem are emailed to the creator’s address, then discarded. Join count is only in that inbox.
- Owner email is verified with a short-lived signed link before a form can send mail to that address.
- Optional respondent confirmation and in-memory PDF attachments are also emailed, not saved.
What we do not do
- No PostgreSQL, Prisma, MongoDB, Supabase, Firebase, or Redis for submissions.
- No /responses or /submissions dashboard. History is the owner's inbox.
- We do not log answer bodies or respondent emails.
- We cannot recover a lost form link. Changing questions means creating a new link.
- Google Drive / Docs export is not enabled on this site.
Honest limits
Hosting providers may keep short-lived request logs (IP, URL, time). Encrypted tokens can appear in those logs and in the respondent's browser history. Email providers store the message you receive. Those copies are outside ToolZora's form database — because there isn't one.