Privacy Policy
Last updated September 2, 2026
This is a general-purpose template, not legal advice. Review it (ideally with a lawyer) and update the placeholders — especially the contact email and anything about your specific region's privacy law — before relying on it for a live product.
1. Who we are
Minimal Forms ("we", "us") is a form-building service that lets people create forms and surveys and collect responses. This policy explains what data we collect, why, and how you can control it.
2. What we collect
- Account data. When you sign up, our authentication provider (Clerk) collects your email address, name, and authentication details (e.g. password hash or social login identifiers). We never see or store your password ourselves.
- Content you create. Form titles, descriptions, questions, answer options, and any background or question images you upload.
- Responses. When someone fills out one of your published forms, their answers (and, for image-backed questions, no personal data beyond what they type) are stored and shown to you as the form owner. We do not require respondents to have an account.
- Usage and log data. Standard technical data (IP address, browser type, timestamps) collected by our hosting provider for security and reliability.
3. How we use it
- To operate the service: create your account, save your forms, and deliver responses to you.
- To secure the service: detect abuse, spam, and unauthorized access.
- To communicate with you about your account (e.g. sign-in codes, important service notices).
We do not sell your data or use it for third-party advertising.
4. Who we share it with
We use a small number of service providers (subprocessors) to run Minimal Forms:
- Clerk — authentication and account management.
- Supabase — database and file storage for your forms, responses, and uploaded images.
- Our hosting provider — runs the application itself.
These providers process data only as needed to provide their part of the service, under their own privacy and security terms.
5. Your responsibilities as a form owner
If you use Minimal Forms to collect personal data from respondents (names, emails, health or financial information, etc.), you are the controller of that data. You're responsible for having a lawful basis to collect it, telling respondents what you'll do with it, and honoring any deletion or access requests they make to you directly.
6. Cookies
We use the minimum cookies needed to keep you signed in, set by our authentication provider (Clerk). We do not use advertising or cross-site tracking cookies.
7. Data retention
We keep your forms and responses for as long as your account is active. If you delete a form, its questions, responses, and uploaded images are permanently removed from our database and storage. If you delete your account, we delete your data within a reasonable period, except where we're required to keep records for legal reasons.
8. Security
We use industry-standard measures (encrypted connections, access-controlled databases) to protect your data. No method of storage or transmission is 100% secure, and we can't guarantee absolute security.
9. Your rights
You can access, edit, or delete your forms and account data at any time from your dashboard. To request a full export or deletion of your account data, contact us at hello@ivaan.cc. Depending on where you live, you may have additional rights under laws like the GDPR or CCPA.
10. Children's privacy
Minimal Forms is not directed at children under 13, and we do not knowingly collect personal data from them.
11. Changes to this policy
We may update this policy from time to time. We'll update the "Last updated" date above when we do.
12. Contact
Questions about this policy? Email hello@ivaan.cc.