Privacy Policy

Last updated: March 31, 2026

Introduction

forms.wtf (“we”, “us”, “our”) operates the forms.wtf platform. This policy explains how we collect, use, and protect your data.

Information We Collect

  • Account info: wallet addresses, email (if provided), ENS names, display names.
  • Form data: forms you create, questions, settings, token gating rules.
  • Response data: form responses submitted by respondents, including wallet addresses, answers, and timestamps.
  • Usage data: page views, device type, browser, country/region (via IP geolocation), referrer URLs.
  • Payment data: processed by Stripe and on-chain payments; we store transaction references but not full card details.
  • Cookies: session cookies for authentication, localStorage for theme and visitor tracking.

How We Use Your Data

  • Provide and maintain the service.
  • Process form submissions and deliver responses to form creators.
  • Verify wallet ownership and token gating eligibility.
  • Send email notifications (submissions, team invites, billing).
  • Analytics and service improvement.
  • Process payments and manage subscriptions.

Data Sharing

  • Form creators see respondent wallet addresses, ENS names, and answers.
  • Google Sheets: if connected, responses sync to the creator's Google Sheet.
  • Webhooks: if configured, responses are POSTed to creator-specified URLs.
  • Stripe: payment processing.
  • AWS SES: email delivery.
  • We do NOT sell your data to third parties.

Blockchain Data

  • Wallet addresses and on-chain token balances are publicly accessible on blockchains.
  • We read on-chain data for token gating verification only.
  • No on-chain transactions are initiated on your behalf without explicit action.

Data Retention

  • Account data retained while account is active.
  • Form responses retained until form creator deletes them.
  • Analytics data retained for 12 months.
  • You can request data deletion by contacting us.

Security

  • HTTPS encryption, secure session cookies, password-less authentication.
  • API keys are hashed before storage.
  • Webhook secrets are encrypted.

Your Rights

  • Access, correct, or delete your personal data.
  • Export your form responses (CSV, JSON).
  • Disconnect third-party integrations.
  • Delete your account.

Contact

Questions about this privacy policy? privacy@forms.wtf