Privacy.

What Formbrook keeps about you, why, who else handles it, how long we keep it and what you can do about it.

Last updated [Owner: date this version goes live]

In short

To join the waitlist we need only your email address. We use it to confirm it and to invite you to the beta, nothing else.
You can leave the list any time with the link in every email, and we delete your address.
Visits are counted without cookies or anything else stored on your device. The only cookies briefly hold the address you just submitted and a code for sending your optional answers (see below).
We don't sell your data or use it for advertising.

Who is responsible

Formbrook is run by [Owner: legal name of the controller], [Owner: organisation number, if any], [Owner: postal address], Sweden. We are the controller for the personal data on this page.

Questions and requests about your data: [Owner: contact email address]. We have no data protection officer; a business of our kind doesn't need one.

What we keep, why, and on what basis

The waitlist

What: Your email address. Which link brought you to the page (for example instagram), taken from the campaign tag in the link or from the address of the site you came from. When you signed up, which version of the consent text you saw, and when you confirmed.
Why: To check that the address is yours (we email you a confirmation link), to invite you to the beta when there's room, and to be able to show that you agreed.
Basis: Your consent (GDPR Art. 6(1)(a)), which you give by clicking the confirmation link. Swedish marketing law also requires consent before we email you about Formbrook.

Your optional answers

What: Whether you have a 3D printer and a router, and what you want to build.
Why: To choose who to invite first: we invite in small batches and pick people by what they want to make. You stay on the list whether you answer or not.
Basis: Your consent, which you give by answering. Leaving the list deletes the answers.

Invitations

What: The email address an Invitation was sent to, which batch it was in, and when it was sent and accepted.
Why: To let you create your account and to know who took part in which batch.
Basis: Your consent, the same one you gave when you joined the waitlist.

Your account

What: Your email address, your password (stored only as a one-way hash), your settings and the Designs you save.
Why: To let you sign in and keep your work.
Basis: Our agreement with you to provide the service (GDPR Art. 6(1)(b)).

How you use Formbrook

What: For each signed-in User: when they first signed in, each time they created a Design and each time they exported one. Nothing about your device, your IP address or the shapes you design, and nothing at all while you work in an unsaved Draft without signing in.
Why: To learn whether people use Formbrook all the way to a printed Former, so we can decide whether to launch it and what to improve.
Basis: Our legitimate interest (GDPR Art. 6(1)(f)) in knowing whether the tool works for the people using it. You can object; see your rights.

Visits to this site

What: Which pages of formbrook.com are visited, the campaign tag of the link (if any), the site you came from, and your browser, operating system, type of device, screen size and country. We count visits with Umami, which we run ourselves on Railway, so no analytics company sees them. It uses no cookies and stores nothing on your device. It uses your IP address and browser details only to count unique visitors, through an identifier whose salt changes every day, and does not store your IP address. Before a visit is counted, the page strips everything from the address but the campaign tag, so the codes in our email links never reach it. It never runs in the designer.
Why: To know how many people visit and which links bring them.
Basis: Our legitimate interest in knowing whether our posts and links reach anyone. You can object, or switch the counting off yourself as described below.

Feedback reports

What: What you write, the Design or Draft you were looking at, a picture of the 3D view (unless you leave it out), your browser and graphics details, recent error messages and your User id. The form tells you what is attached before you send.
Why: To fix what's broken and to consider your ideas, and to reply to you by email.
Basis: Our legitimate interest in improving Formbrook and answering the people who write to us.

Server logs

What: The pages and addresses requested, with time and IP address, as any web server records them.
Why: To keep the service running and secure.
Basis: Our legitimate interest in a working, secure service.

What we store on your device

On formbrook.com, two cookies, and only after you submit the waitlist form. For an hour, one holds the address you typed, so the "Check your inbox" page can show it back to you, and the other a code that lets that page send your answers to the optional questions. They are sent only to the waitlist's own pages and used for nothing else. No other cookies and no local storage. If you don't want your visits counted at all, you can set a flag that Umami looks for. Open your browser's developer console on formbrook.com and run:

localStorage.setItem('umami.disabled', '1')

Umami's script reads this flag from your browser's local storage and then sends nothing. The flag stays on your device and is never sent anywhere. Remove it with localStorage.removeItem('umami.disabled').

In the designer, your browser keeps the cookie that keeps you signed in, your unsaved Draft and your settings. They are there only to provide what you asked for.

Who else handles your data

These companies process data for us, under data processing agreements, and only on our instructions:

Cloudflare runs the DNS for formbrook.com and stands in front of the website as a proxy, so every request to the site passes through it: the address (URL) requested, your IP address and your browser details.
Railway hosts Formbrook: the website, the database and the analytics. Everything above is stored there, in the [Owner: Railway region of the service and database] region.
Resend sends our emails (the confirmation link and the Invitation), so it receives your email address and the message.
GitHub holds each Feedback report as an issue in our private repository, so we can track the work. The issue names your User id, never your email address. A picture of the 3D view sent with a report is not uploaded to GitHub: it is stored in our database, and the issue links to it by an address no one can guess.

We share your data with no one else, and we never sell it.

Transfers outside the EU

Resend stores account data and logs, which include your email address, in the United States. That transfer relies on the EU–US Data Privacy Framework, which the European Commission has found to give adequate protection (Decision (EU) 2023/1795); Resend's data processing agreement also includes the EU's standard contractual clauses. Cloudflare is a US company and handles each request at the data centre nearest to you, which can be outside the EU. [Owner: confirm the transfer basis for Cloudflare and GitHub, and for Railway if its region is outside the EU]

How long we keep it

Unconfirmed addresses: deleted 30 days after you submit the form, if you never click the confirmation link. The link itself stops working after 7 days. [Owner: this deletion is done by hand until it is automated]
Your Waitlist entry, with your answers and the record of your consent: kept until the beta ends, then deleted, and deleted at once when you leave the list. If you accept an Invitation, the entry stays, marked as joined, so we can tell which links brought the people who joined.
Invitations: kept until the beta ends, then deleted. An Invitation expires after 14 days if you don't use it.
Your account, Designs and usage records: kept as long as you have an account. Deleting the account deletes them.
Feedback reports and their pictures: kept until the beta ends, then deleted from our database. The GitHub issue, which names only your User id, may stay as part of our development history.
Visit counts: kept until the beta ends, then deleted.
Server logs: kept by Railway for [Owner: log retention on the Railway plan].

Your rights

You can ask us to:

show you the data we hold about you, and give you a copy (access);
correct it (rectification);
delete it (erasure);
stop using it for a while (restriction);
stop using it where we rely on our legitimate interest, such as usage records and visit counts (objection);
hand it over in a machine-readable form (portability).

You can withdraw your consent at any time: use the unsubscribe link in any email from us, or the “Leave the list” link on the page you reached when you confirmed. Your address is then deleted and we email you nothing more. Withdrawing doesn't make what we did before unlawful.

To use any of these rights, email [Owner: contact email address]. We answer within a month, free of charge.

If you think we handle your data wrongly, you have the right to complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se. We'd be glad to hear from you first.

Good to know

Giving us your email address is voluntary, but without it we can't invite you. The questions are optional; skipping them keeps you on the list.
No decisions are made about you automatically. We pick who to invite by hand.
The waitlist is for people aged [Owner: minimum age, 13 or 18] or older.
If we change this page, the date at the top changes. If a change affects what you agreed to, we ask you again.