CatchForm

Privacy Policy

Last updated August 2026

What we collect from you. Your name, email address and password hash when you register. Billing details are collected and held by Paddle, our merchant of record — we never see your card number.

What we collect from your visitors. Whatever fields your form contains, plus the visitor's IP address and browser user-agent. You choose the fields; we store what is sent.

Why. To operate the service: store submissions, notify you, apply plan limits, and prevent abuse.

Where. On our servers in Germany, hosted with Hetzner Online GmbH.

How long. Submissions are kept until you delete the form or close your account. Account records are removed within 30 days of closure, except what we must keep for accounting.

Who else sees it. Paddle (payments), our email provider (delivery of notifications), and any webhook endpoint you configure yourself. No one else, and we sell nothing.

Your rights. Access, correction, export and deletion — write to hello@catchform.dev and we respond within 30 days.

Your own obligations. You are the controller of the data your visitors submit. Telling them what you collect and why is your responsibility, not ours.

Cookies. One session cookie to keep you signed in. No advertising or third-party tracking cookies.