Where data lives

This is a starter text for launch. Have your counsel review it and add the legal entity before you publish.

European Union

Submissions, accounts, and form settings live in Cloudflare D1. Create the database with EU jurisdiction: wrangler d1 create formgong --jurisdiction eu.

What is not stored

The raw IP address. Submissions keep a hash keyed with the server secret so bursts can be limited without identifying a person. Analytics events do not store an IP at all.

Cookies, a persistent identifier, and a browser fingerprint. The analytics script sets none of these, so it does not need a consent banner.

Raw gclid, fbclid, and msclkid values. Only the ad platform is kept.

Other services

Email: Resend, from your verified domain.

Telegram: the Bot API, only after you open the bot link yourself.

Captcha: Cloudflare Turnstile, if you enable the widget.