Draft for review. This is not legal advice and has not been reviewed by a lawyer. Last updated 12 November 2026.

Privacy policy (draft)

Formcask is a form-backend service. This draft describes the data we intend to handle when the product is publicly hosted.

What we collect

• Account data: email address, password hash, API key, plan, and optional billing identifiers from our payment processor.
• Form submissions you ask us to store, including fields and optional file uploads, plus the submitter IP used for rate limiting.
• Technical logs (request times, error messages) needed to run the service.

How we use it

To provide the service: store submissions, email you, deliver webhooks you configure, enforce plan limits, and secure accounts (including password reset). We do not sell personal data.

Processors we may use

Hosting, DNS, transactional email (Resend or Postmark), and payments (Stripe), once those accounts are connected. Until then, email is logged locally and not sent.

Retention

Dashboard history follows the plan (30 days on Free, 365 days on paid plans, subject to change). Account data is kept until you ask us to delete the account.

Contact

Use the email on your Formcask account, or the address published on formcask.com once the site is live.