Privacy

Updated 30 September 2026

This is what Lazer Forms (we, us) collects, why, where it goes, and what you can do about it.

Two kinds of people use Lazer Forms. Account holders build forms and read submissions. Respondents fill in a form someone sent them. For a respondent's answers, the workspace that owns the form decides what is collected and why. We store and process the answers for that workspace. Questions about a form's answers go first to whoever sent you the form.

What we collect from account holders

• Your email address and your name if you give it. There is no password. You sign in with a code sent to your email.
• Your workspaces, forms, lists, settings, and the people you invite.
• The IP address and browser of each signed-in session, to keep sessions safe.
• A record of changes made in a workspace, the audit log, so owners can see who did what.
• If you pay, Stripe holds your card details. We see the plan, the status, and the Stripe customer id, never the card.

What we collect from respondents

• The answers you type, and the photos, files, signatures, and locations you add.
• The IP address and browser the form was sent from, stored with the submission to help its owner spot abuse.

Why

To run the service: to show forms, store and email submissions, print PDFs, bill paid plans, keep accounts secure, and stop abuse. We do not sell personal information, we do not show ads, and we do not use anyone's content to train models.

Who it goes to

• Cloudflare hosts the service, the database, and the files, and sends the email. Data may be processed in any country Cloudflare runs in.
• The people a workspace chooses receive each submission by email, with its PDF.
• Stripe takes payments for paid plans.
• Anthropic receives the sentence you type when you ask Lazer Forms to draft a form, and the form being revised. Submissions are never sent.
• OpenStreetMap receives a location's coordinates when a form's location field is set to look up the street address. That setting is off unless the form's owner turns it on.

How long we keep it

• A workspace's forms and submissions stay until its owner deletes them or the workspace.
• Deleting a workspace deletes its forms, submissions, and files straight away. Backups are kept for 30 days and then deleted.
• Submissions to the public demo forms are deleted after a day.
• Sessions expire after a week without use.

Your choices

• An owner can export everything in a workspace, as one file, from the settings screen, and can delete the workspace.
• You can change your name, and sign out every other browser, on the account screen.
• To see, correct, or delete what we hold about you, write to support@lazerforms.com. If it is a respondent's answer, we pass the request to the workspace that owns it.

Cookies

One cookie, set when you sign in, keeps you signed in. It is not used for anything else. Public forms set no cookies. We use no tracking or advertising cookies.

Security

Everything travels over HTTPS. There are no passwords to steal. A sign-in code is stored only as a hash, works once, and expires after ten minutes. Invite links work once and expire. The admin lives on its own host, apart from the public forms. If you find a problem, write to support@lazerforms.com.

Changes

If this policy changes in a way that matters, we email the owners of each workspace first.