Privacy Policy
Last updated: February 2026
Boringform ("we", "our") respects your privacy. This policy describes how we collect, use, and protect information when you use our form-handling service. We process personal data in line with the GDPR where applicable.
Information we collect
We collect the email address you provide to create or claim a form, and any data submitted through forms you host with us. Form submission data is stored to deliver messages to you and is not used for marketing or shared with third parties for their marketing.
Legal basis
We process your data on the basis of contract performance (providing the form and submission delivery service), and where you opt in to product updates, on the basis of your consent. We may process data where necessary for our legitimate interests (e.g. security, fraud prevention) in a way that does not override your rights.
How we use it
We use your email to verify ownership of forms, send verification links, and optionally product updates if you opt in. Form submissions are delivered to you according to your form configuration (e.g. email, webhooks). We do not sell your data or form submissions.
Data retention
Submission data is retained according to your plan. For Pro with an active subscription, we do not automatically delete your submission history-you keep access to your data for as long as you are a paying customer. For Hobby and Starter (and for former Pro users after their plan is no longer active), we may automatically delete submissions older than 90 days. Account data is retained until you delete your account; after deletion we anonymize or remove your data as described below. We may keep certain data longer where required by law or for legitimate operational reasons.
Cookies
We use strictly necessary cookies to provide the service:
- bf_session - session authentication; expires in 20 minutes; HttpOnly, Secure (in production), SameSite=Lax.
- bf_refresh - refresh token for staying signed in; expires according to your session settings; HttpOnly, Secure (in production), SameSite=Lax.
- bf_validation - temporary storage of form validation errors when you submit a form (path /f only); short-lived.
These cookies are essential for the service and do not require consent under the ePrivacy Directive where they are strictly necessary. We do not use advertising or third-party tracking cookies.
Subprocessors
We use the following subprocessors to operate the service. Each processes data only as necessary to provide their function:
- Stripe - payment processing; processes billing and subscription data (e.g. email, payment method metadata). Stripe Privacy.
- Email delivery - we use an email provider (e.g. Resend, Zoho) to send transactional and notification emails; they process recipient addresses and email content only for delivery.
- Cloud storage (e.g. AWS S3) - for file attachments on paid plans; files are stored in our bucket and not used for other purposes.
- Hosting / infrastructure - our application and database are hosted by a infrastructure provider; they process data as necessary to run the service.
Data may be processed in the European Economic Area and/or other regions. Where we transfer data outside the EEA we rely on adequacy decisions or appropriate safeguards (e.g. standard contractual clauses).
Your rights
You have the right to access your data (e.g. via the account export in the dashboard), rectification (update your profile in settings), erasure (delete individual submissions in the dashboard or delete your entire account), data portability (export your account data as JSON from the dashboard), and to object or restrict processing in certain cases. You can also withdraw consent for marketing emails at any time in your account settings.
To exercise these rights or for any privacy request, please contact us first at hello@boringform.com; we will respond in line with applicable law. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority.
Contact
For privacy-related questions or requests, contact us at hello@boringform.com.