Privacy Policy

What we collect

When you create an account, we store your email address and name. When you create forms, we store the form structure and any submissions received.

Form submissions are stored as provided by respondents. We hash IP addresses for spam prevention — we do not store raw IPs.

How we use it

• To operate the service (show you your forms and submissions)
• To send transactional emails (magic link sign-in)
• To prevent abuse (rate limiting, IP hashing)

We do not sell, share, or use your data for advertising. We do not train AI models on your submissions.

Data storage

Data is stored on Render-managed infrastructure in the US. Database connections are encrypted via TLS. Passwords are hashed with bcrypt.

Your rights

You can delete your account and all associated data at any time. Form respondents can request deletion by contacting the form creator or emailing us directly.

If you're in the EU, you have rights under GDPR including access, rectification, and erasure. Contact us and we'll handle it promptly.

Cookies

We use a single HttpOnly cookie for session refresh tokens. No tracking cookies, no analytics scripts, no third-party cookies.

Contact

Questions or requests? Email hi@pluck.one.