Privacy, cookies and GDPR

• No cookies, and nothing stored in your visitors' browsers that identifies them.
• Never what people type: only whether a field is empty or not, how long it was used, and the kind of error shown.
• No IP addresses or browser details stored; only the device type (mobile, tablet, desktop).
• Raw events are kept for 90 days, then only daily totals remain. Data is stored with Supabase in London (United Kingdom).

For your visitors' data you decide why it's collected and Formleak processes it on your behalf. Mention in your privacy policy that you use Formleak to measure how your forms are used, without cookies and without recording what people type. Need a data processing agreement? Email formleakco@gmail.com.

Whether you need consent for analytics depends on your country's rules; because Formleak sets no cookies, many websites don't. Read our full privacy policy.