Privacy, terms & fair use
Short, plain-language terms that match how TinyForm actually works today.
Your account is just an email address — no password, ever. Forms you build (title, description, and field definitions) are stored so you can edit and share them.
A one-time login code is stored for 5 minutes so it can be verified, then it's useless — codes aren't reused and expire automatically.
Form submissions aren't stored by default. When someone fills in your form, the answers are emailed to you and a response counter goes up by one — the content of the answers themselves doesn't touch our database, and there's no dashboard of past responses to show.
If you turn on "Also save responses" for a form, its submissions are kept in our database too, so you can export them as CSV later. That's opt-in per form and off by default — files someone uploads when submitting your form are never stored either way, opted in or not; only a note that the file was emailed to you is kept.
The one exception: an image you add to a form's own layout (a logo or illustration shown to everyone who visits it) is stored, since it has to be there for as long as the form is — that's different from a file someone submits to your form, which is never kept.
You're responsible for the content of the forms you create and for how you use the information people submit to them. Don't use TinyForm to collect information unlawfully, deceptively, or without the consent your form-fillers would reasonably expect.
Sign-in is by emailed one-time code only — there are no passwords to leak. Submissions are emailed to you, so keep that inbox secure: anyone with access to it can read your responses.
Don't use a form to collect passwords, payment card numbers, government ID numbers, or health records. TinyForm isn't built or certified for that kind of data.
Found a security problem? Please tell us at support@tinyform.org before making it public, and don't access data that isn't yours while testing.
You may not use TinyForm to:
TinyForm is free to use with no cap on the number of forms or submissions, as long as use stays within what's reasonable for the service. Hard limits today: files are up to 10MB each and 15MB per submission.
As a guide, sustained use of around 50,000 submissions or 50,000 notification emails a month, month after month, is beyond normal use. Occasional spikes are fine. If you get there we'll contact you first to find a solution that works, and we may add rate limits to protect the service for everyone.
We may limit or suspend a form or account that breaks these terms — normally after a warning, but without notice for clear abuse such as phishing or spam.
TinyForm is provided "as is" with no uptime guarantee, and to the extent the law allows we aren't liable for lost data or indirect damages. Keep a copy of anything important.
Outbound email (login codes and form submissions) is sent through a standard SMTP relay.
Google Analytics runs on every page of this site, including the public link of a form you've built — so anyone who fills in your form is counted in that traffic too, the same as any other page view. No advertising trackers run on TinyForm.
Signing in with Google is optional — email/code login works without it. If you use it, Google verifies your identity and we only receive and store the verified email address, nothing else from your Google account.
These terms may be updated as TinyForm evolves. Material changes will be reflected on this page. Continued use after an update means you accept the revised terms.
Questions? Reach out at support@tinyform.org.