The short version.

What we keep

• Your Google profile.Name, email, avatar — what Google hands us when you sign in. We don't ask for anything else.
• Your forms. The blocks, the logic, the theme — stored so you can come back to them.
• Submissions.Answers your respondents type in, tied to the form you built. We don't store the respondent's IP with the answer.
• Anonymous events. Form viewed, field focused, form submitted — with device type and an anonymous session id. Powers the analytics you see.

What we don't do

• — Sell data to advertisers. Ever.
• — Run third-party trackers on your forms.
• — Feed your form content or submissions into AI training.
• — Read your submissions unless you ask us to help debug.

Where it lives

On Supabase (Postgres, US region), behind TLS in transit and AES-256 at rest. Only your signed-in account can read your forms' submissions — enforced at the database with row-level security, not just at the app layer.

Who we share it with

Only the sub-processors we need to run coolform: Supabase (database & auth), Vercel (hosting), Google (sign-in), and Google Gemini (when you use the AI builder — we send your prompt, not your submissions). That's the list.

Getting your data out

Export submissions as CSV from any form's analytics page. Want everything deleted? Email hellocoolform@gmail.com from your signed-up address. We process deletes within 7 days — GDPR / CCPA timelines respected either way.

Cookies

One first-party cookie to keep you signed in. No ad cookies, no analytics cookies. A single anonymous session id in localStorage on form respondents' devices so the same person opening a form twice isn't double-counted.

Changes

If anything material changes we'll bump the version at the top and email signed-up accounts. Copy fixes we'll just push.

Written by a human

coolform is built and operated by one person. If something here is unclear or you want more detail, just ask — hellocoolform@gmail.com.