What we store, and what we don't.

The short version

We store your email, a hash of your password, your username, and whatever you put on your page. We count page views and link clicks in aggregate. We do not track your visitors across the web, we do not build advertising profiles, and we do not sell anything to anyone.

What we collect from you

• Your email address. Used to sign you in and to contact you about your account. Not added to a marketing list.
• Your password, hashed. Stored with bcrypt. We cannot read it, and nor can anyone who obtains the database.
• Your page content. Username, display name, tagline, bio, links, theme, and any images you upload. All of it is public by design — that is what a bio page is.
• If you sign in with Google: your email, name, and profile photo URL. Nothing else, and we do not get access to your Google account beyond that.

What we collect from your visitors

When someone opens your page we increment a counter. When they tap a link we increment a counter for that link and record the timestamp so we can draw your chart.

To avoid counting the same person repeatedly, we hold a short-lived marker: a hashed combination of IP address and browser identifier for page views, and a cookie for link clicks. Neither is used to identify anyone, neither is shared, and the hash is one-way — the original address is never written down.

We do not use third-party analytics, advertising pixels, or tracking scripts on public pages. There is no cookie banner because there is nothing to consent to beyond what makes the counters work.

Cookies we set

• A session cookie, when you are signed in. It is HTTP-only, so scripts on the page cannot read it.
• Click-deduplication cookies on public pages, which expire after an hour and contain nothing but the digit 1 under a hashed name.

Where your data lives

In our database and, if you upload images, in object storage. Both are operated by our hosting providers as data processors. We do not copy your data anywhere else.

Getting your data out, or deleting it

Deleting your account removes your user record, your profile, your theme, your links, and every click event attached to them. This happens immediately and cannot be undone — there is no recovery window and no soft delete. Do it from Settings.

For a copy of your data before you go, email help@formza.me from your account address and we will send you a JSON export.

Children

Formza Bio is not intended for anyone under 13. If we learn that an account belongs to a child under 13, we delete it.

Changes

If we change what we collect, we will update this page and say so in the product before the change takes effect. We will not quietly start collecting something new.

Contact

Questions about any of this go to privacy@formza.me.