Privacy Policy
Last updated: October 17, 2026
1. Who we are
FormPing (“we”, “the Service”) is a website monitoring service operated by an independent developer. Contact: privacy@formping.io. This policy explains what data we collect, why, and what rights you have over it.
2. What we collect
Account data. Email address, and (if you subscribe) your billing status. We never see or store your payment card details — payments are processed by our merchant of record.
Verified domains. The domains you verify and prove ownership of, plus the results of tests we run on them (timestamps, test outcomes, technical error details).
Test data. All form submissions we make are synthetic — generated addresses like qa-test-…@formping.io — and are discarded immediately after each test run. We do not collect, see, or store any data submitted by your real visitors.
Usage data. Basic technical logs (IP address, user agent, pages visited) used for security and abuse prevention.
3. How we use it
- To run the Service: verifying domain ownership, executing tests, generating reports and alerts you asked for.
- To communicate with you: transactional emails (test alerts, reports, account notices). We only send marketing email if you explicitly opt in, and every email includes an unsubscribe link.
- To secure the Service: abuse prevention, rate limiting, and legal compliance.
We never sell your data. We never use your data to train AI models.
4. Where your data is stored
Data is stored on infrastructure in the European Union (Supabase, hosted in the EU region; Cloudflare). Backup copies may exist within the same region.
5. Third-party processors (subprocessors)
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database & authentication | EU |
| Vercel | Website & API hosting | EU region available / US |
| Cloudflare | CDN & test-runner infrastructure | Global |
| Resend | Transactional email | US |
| Creem | Payment processing (merchant of record) | EU |
Each subprocessor is bound by data protection terms consistent with this policy.
6. Data retention
- Test logs: rolling deletion after 30 days.
- Reports: retained for 90 days, then deleted.
- Account data: kept while your account is active; deleted within 30 days of account deletion.
- Transactional/billing records we are legally required to keep (via Creem, as seller of record): per applicable law.
7. Your rights (GDPR / CCPA)
If you are in the EEA/UK you may request access, rectification, erasure, portability, or restriction of processing of your personal data, and object to processing based on legitimate interest. Email privacy@formping.io — we respond within 30 days. You may lodge a complaint with your local supervisory authority. California residents have equivalent rights under the CCPA and will not be discriminated against for exercising them. The legal bases we rely on: performance of the contract, legitimate interest (security, abuse prevention), and consent (marketing email).
8. Cookies
We use a minimal set of cookies and local storage required for sign-in sessions. No advertising or cross-site tracking cookies. No third-party analytics on pages behind authentication.
9. Security
HTTPS everywhere, hashed passwords, per-user rate limits, and least-privilege database access. Test submissions are synthetic and discarded immediately; we hold no customer leads, ever.
10. Children
The Service is a business tool, not directed at children, and we do not knowingly collect data from anyone under 16.
11. Changes
If we materially change this policy we will notify you by email at least 14 days before the change takes effect.
12. Contact
Privacy questions: privacy@formping.io