Privacy Policy & Imprint

Who runs this site

Forma is run by Dhayasankar Vasudevan, an independent developer based in Pinneberg, Germany. I use this site to collect survey data for my own startup research. Contact: dhayasankarinslm@gmail.com. I am the data controller for account data. Survey answers are processed on behalf of the person who created the survey.

What is collected and why

Account holders: your name, email address and a hashed password (the password itself is never stored). This is needed to provide your account (GDPR Art. 6(1)(b)).

Survey respondents: only the answers you submit, together with a submission timestamp. No account is needed, and your IP address, name and email are not stored with your response. Whether the answers themselves contain personal data depends on what the survey asks. Questions about a specific survey should go to its creator.

IP addresses are held briefly in memory for rate limiting to prevent abuse (legitimate interest, GDPR Art. 6(1)(f)). They are never written to a database.

Cookies

Only strictly necessary session cookies are set, to keep account holders signed in. There are no advertising, analytics or third-party cookies, which is why there is no cookie banner.

Where your data lives

Data is stored in a Neon PostgreSQL database in Frankfurt, Germany (AWS eu-central-1). The site is served by Vercel, whose infrastructure may process requests outside the EU under its EU-US Data Privacy Framework certification and standard contractual clauses.

How long data is kept

Accounts and surveys exist until you delete them. Deleting a survey deletes all of its responses. Deleting your account deletes everything you own. Both options are available in the app and take effect immediately and permanently.

Your rights

Under the GDPR you can request access, correction, deletion, restriction, portability, or object to processing. You can also lodge a complaint with your local supervisory authority. Account holders can correct or delete their data directly in Settings. For anything else, email me. If you responded to a survey, please contact the survey's creator, since responses are anonymous and I cannot tell which one is yours.

Changes

If this policy changes materially, the date above will be updated and the change noted on this page.