Last updated: 13 August 2026. Applies to the hosted service at https://formroost.shovelware.ai. If you self-host Formroost, none of this leaves your server.
| Data | Why | Kept |
|---|---|---|
| Your email address (form owner) | To send your access key, sign-in links, and submission notifications | Until you delete your account |
| Form submission contents | Relayed to your inbox. Not stored by default. | Relay-only unless you turn on history |
| Stored submissions & uploads (opt-in history) | So you can browse and export them in the dashboard | 30 days; deleted immediately if you turn history off |
| Submitter IP address & user agent | Rate limiting and spam filtering only | Transiently, in rate-limit counters |
We use a self-hosted instance of Umami (running on our own infrastructure — no third-party analytics processor) to understand how the site is used. It is cookieless and collects no personal information beyond the page interactions described here.
We record user sessions on this site. A recording captures your clicks, scrolling, and the pages you view. Everything you type into an input field is masked before the recording leaves your browser, and regions of the dashboard that display form-submission contents are excluded from recording entirely. Recordings are kept for 30 days, then deleted.
Opting out: enable "Do Not Track" in your browser and no analytics or recording data is sent at all — we honour it.
If you point a form at Formroost, you are responsible for telling your visitors where their submission goes. We act as a relay on your behalf: by default a submission is emailed to you and not stored. If you enable history, submissions are stored for you and deleted when you disable it or after 30 days.
Questions or deletion requests: hello@formroost.com. Security reports: see our security policy.