legal
Where your data lives
Where Un-static Forms stores form submissions, and which other companies handle them on the way
Un-static Forms runs on servers at Hetzner in Falkenstein, Germany. A submission to your form endpoint arrives there, and the database with your submissions, your account and your form settings runs there.
Other companies handle parts of a submission. We name them here so you can pass the same facts on to your own visitors.
Hosting: Hetzner, Germany
Our production servers are rented from Hetzner Online GmbH, a German company, in its data centre in Falkenstein, Germany. The application that receives your form posts and the database behind it run on those servers.
E-mail: Postmark
When a submission comes in, we send you a notification e-mail with its contents. We send that e-mail through Postmark, a transactional e-mail service of ActiveCampaign, LLC, a company based in the United States. The contents of the notification pass through Postmark on their way to your inbox.
If you turn on an auto-response, that e-mail to your visitor, with any form values you put in it, goes through Postmark as well.
File uploads: Cloudflare R2
If your form accepts file uploads, the uploaded files are stored on Cloudflare R2, an object storage service of Cloudflare, Inc., a company based in the United States. The R2 storage that holds them is located in Europe. A form without a file field stores nothing on R2.
When an account is deleted, the copy we keep for 24 months (see our privacy policy) includes its uploaded files, and those stay on R2 for that period.
Captcha
Spam protection is on by default: a visitor who posts to your form gets a captcha check. The default provider is Google reCAPTCHA, a service of Google LLC, a company based in the United States. On a linked form you can choose Cloudflare Turnstile or hCaptcha instead. The captcha provider checks the visitor’s browser. We do not send the contents of the form to it.
What this page does not cover
This page describes where a form submission is stored and which companies handle it. It is not a list of every service we use: payment and the statistics of this website are outside it. Webhooks you add send submissions to the destinations you choose. Our privacy policy describes how we handle personal data in general.
If you need more detail for your own records, please contact us.