Cookie Policy

Formz itself sets a small number of cookies, all of which are strictly necessary to operate the Service. We do not use advertising, tracking, or analytics cookies. Some optional form features, described in section 3, use third-party services that set their own cookies.

1. Authentication Cookies

When you sign in, Supabase (our authentication provider) sets session cookies that keep you logged in across requests. These are required for the Service to work and cannot be disabled while remaining signed in.

2. OAuth Connect-Flow Cookies

When a respondent connects a social account (Twitter/X, Discord, Google, Telegram, or LinkedIn) to verify their identity on a form, we set a short-lived (10-minute), HTTP-only cookie to securely complete that one connection attempt and prevent replay/forgery. These cookies expire automatically and are not used for tracking.

3. Third-Party Services on Some Forms

These only apply to forms whose owner has turned the feature on:

• Google reCAPTCHA (spam protection): Google may set cookies and collect device and browser information to tell people from bots. See Google's Privacy Policy and Terms of Service.
• Wallet connections (WalletConnect/Reown, Coinbase Wallet, TON Connect, and other wallet apps): when a respondent connects a wallet, these services may store connection details in the browser so the wallet stays connected.

On the Formz sign-up, sign-in and password reset pages, Cloudflare Turnstile checks that the visitor is not a bot. It collects device and browser information for that check. See Cloudflare's Turnstile Privacy Addendum.

4. No Advertising or Analytics Cookies

Formz does not use Google Analytics, advertising pixels, or tracking cookies. Form-level analytics (views, starts, completions) that you see as a form owner are collected without cookies, directly against your own forms.

5. Managing Cookies

Disabling the cookies Formz sets will prevent you from staying signed in or completing a social-verification connection. Blocking third-party cookies may stop reCAPTCHA or a wallet connection from working on forms that use them. You can control cookies through your browser's settings at any time.

6. Changes

If we ever introduce non-essential cookies (e.g. analytics), we will update this policy and provide an opt-in consent mechanism before doing so.

7. Contact

Questions about this policy can be sent to support@joinformz.com.