Privacy Policy

Who we are

Forms Maker Daily is run by Michal Hiszpanski, trading as Dungeon Studio Solutions, based in the United Kingdom, who is the controller of your personal data. Contact: formsmaker.contact@gmail.com.

What we collect

When you use a tool

Everything you type into a checklist or other document (names, addresses, notes, ticks, dates, and any photos, logo or signature you add) is saved only in your browser's local storage so you don't lose your work. It is not sent to us. Photos are shrunk and re-drawn in your browser, which removes hidden data such as their location. Clearing your browser data, or using Clear form, deletes it.

To apply the free daily limit, your browser also keeps a small count of documents downloaded today. This count stays on your device too.

When you first open a tool, our host tells the page which country you are in (from your IP address, without storing it) so the document starts in your language and currency.

If you create an account

Your name, email address and a securely hashed password (never the password itself), or your Google account's name, email and profile picture if you sign in with Google. We also keep sign-in sessions (with the IP address and browser they came from) and a count of the documents you download each day, stored only as random keys, never their content, to apply your plan's daily limit.

If you have Pro and choose to save them: your own templates (titles, sections, items and detail field names, never results, notes, photos or signatures) and up to five businesses (name, address, phone, email, website and logo). Logos are re-drawn on our server, which removes any hidden data.

Messages you send us

If you email us, we receive your name, email address and message, and use them only to reply.

Technical and security data

• Basic request data (IP address, browser, pages requested) that our hosting provider logs to run and secure the service.
• Privacy-friendly usage statistics from Vercel Web Analytics: page views counted without cookies and without identifying you.

How and why we use your data

Under UK and EU law each use needs a lawful basis, shown in brackets.

• To provide the tools you use, your account and what you save to it (performance of our agreement with you; legitimate interests).
• To send emails your account needs: confirming your address, resetting your password, security notices (performance of our agreement with you).
• To keep the service secure and fix errors (legitimate interests).
• To understand overall usage with cookie-free, aggregated statistics (legitimate interests).
• To show ads on the free tools, with your consent where required (consent; legitimate interests).
• To answer your messages (legitimate interests).

We do not make automated decisions with legal or similarly significant effects on you.

Cookies and local storage

Our own storage is strictly necessary for the service you ask for, so under UK PECR and the EU ePrivacy rules it does not need consent: local storage for your drafts and the daily download count, and, if you sign in, a secure session cookie that keeps you signed in.

Advertising

Free tools may show ads from Google AdSense. In the UK, EEA and Switzerland, Google's consent banner asks you first: without your consent, only non-personalised ads (no ad cookies for profiling) can be shown. Elsewhere you can opt out, and we honour Global Privacy Control signals in the US. You can change your choice at any time with Cookie settings at the bottom of every page.

When ads are shown, Google and its partners may collect your IP address, device and browser information and the page you are on, under Google's own privacy policy (policies.google.com/technologies/ads). Ads never appear inside the editors or your downloads, and nothing you type into a document is shared with advertisers.

Who we share it with

We never sell your personal data. We share it only with service providers that help us run the service, under contracts that require them to protect it and use it only on our instructions:

• Vercel: website hosting, the country lookup and cookie-free analytics.
• Railway: hosting of our server and database (accounts, saved templates and businesses).
• Resend: sending account emails (address confirmation, password reset).
• Google: sign-in with Google, if you choose it.
• Sentry (Functional Software, Inc.): error monitoring. When something breaks, it receives the error, the page and your browser type, never your IP address, cookies or anything you type into a document.
• Google: AdSense ads (an independent controller for ad data, with your consent where required).
• Prismic: our website's content (no visitor data).

We may also disclose data if the law requires it, to protect people's safety or our rights, or as part of a sale or reorganisation of the business, in which case this policy will continue to apply.

International transfers

Our providers may process data in the UK, the European Economic Area and the United States. When data leaves the UK or EEA we rely on adequacy decisions (including the UK-US Data Bridge and the EU-US Data Privacy Framework where the provider is certified) or on Standard Contractual Clauses with the UK Addendum.

How long we keep it

• Browser drafts and download counts: until you clear them; they never reach us.
• Your account, saved templates and businesses: until you delete them or your account (deleting is immediate and permanent).
• Daily download counts for signed-in users: 30 days.
• Support messages: up to 2 years after your last message, then deleted.
• Hosting, error and security logs: kept by our providers for a short period, typically up to 30–90 days.

How we protect it

All traffic is encrypted with HTTPS, the site sends strict security headers, passwords are stored only as strong hashes, and images you add are checked and re-drawn before use. No system is perfectly secure, but if a breach affects you we will tell you and the relevant regulator as the law requires.

Your rights

You can delete your saved data or your whole account yourself at any time on your account page (Danger zone). For any of the rights below, email formsmaker.contact@gmail.com. It is free, and we will not treat you differently for using them.

UK, EU and EEA

Under the UK GDPR, the Data Protection Act 2018 and the EU GDPR you have the right to access your data, correct it, delete it, restrict or object to how we use it, receive it in a portable format and withdraw consent at any time. You can complain to the UK Information Commissioner's Office (ico.org.uk) or to the data protection authority where you live or work, though we would appreciate the chance to help first.

United States

Residents of California (CCPA/CPRA) and other states with privacy laws have the right to know what personal information we collect, to access, correct and delete it, and to opt out of its sale, sharing for cross-context behavioural advertising or profiling. We do not sell personal information. Personalised Google ads can count as "sharing" under California law: you can opt out at any time with Cookie settings at the bottom of every page, or with a Global Privacy Control signal.

Asia-Pacific and everywhere else

Depending on where you live, laws such as Singapore's PDPA, Japan's APPI, the Philippines' Data Privacy Act, Indonesia's PDP Law, China's PIPL, India's DPDP Act and Australia's Privacy Act give you rights to access and correct your data, withdraw consent and complain to your regulator. Wherever you are, you can ask us for a copy of your data or ask us to correct or delete it, and we will help.

Information about other people

If you put other people's details on a document (for example a tenant's name on an inspection report), you decide what to enter and why. It stays in your browser; please only add details you are allowed to use.

Children

The service is for adults. It is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has given us their data, contact us and we will delete it.

Changes to this policy

We will update this policy when the service or the law changes (for example when Pro payments arrive), and change the date at the top.

Contact us

Questions, requests or complaints about privacy: formsmaker.contact@gmail.com. If you are not satisfied with our answer, you can contact your data protection regulator.