Privacy Policy

We collect less
than you think.

Most privacy policies describe what companies do with your data. This one also explains what we technically cannot do — because of how we built the system.

Effective
April 12, 2026
Controller
Working Draft LLC
Contact
hello@forme.press
At a glance
0
Advertising networks

We run no ads. We have no advertising relationships. No ad networks receive your data.

0
Third-party trackers

No Google Analytics. No Meta Pixel. No behavioral tracking of any kind on the marketing site.

0%
Access to your drafts

Encrypted drafts are locked before they reach our servers. We receive a ciphertext we cannot open.

01 — What we collect

The short list.

We collect only what we need to provide the service. We do not collect data for advertising, resale, or any purpose beyond operating forme.

Data type
What we do with it
Email address
Authentication and transactional email only.
Publication name
Displayed on your publication. Nothing else.
Subscription status
Free or paid, for billing purposes.
Draft content (encrypted)
We receive encrypted ciphertext. We cannot read it.
Draft content (unencrypted)
Stored only if you choose not to encrypt. Never shared.
Payment data
We never see or store it. Processed by Stripe directly.
Reading history
We do not track what your subscribers read.
Behavioral analytics
We do not profile your subscribers.
IP address
Standard server logs, retained for 30 days, not tied to identity.
When you enable draft encryption, we receive a blob of ciphertext generated in your browser. The encryption key never leaves your device. We have no mechanism to decrypt your content, comply with subpoenas about it, or disclose it — because we don't have it.
02 — Your subscribers

Your list is your list.

When you use forme, your subscribers sign up for your publication — not for a relationship with us. We store their email addresses and subscription status to operate the service. We do not use that data for any other purpose.

We do not send marketing emails to your subscribers. We do not sell, share, or license their data to any third party. We do not analyze their behavior across publications.

Your subscriber list exports as a CSV whenever you want it. It is yours before, during, and after your time on Forme. Canceling your account does not forfeit access to your list.

If we were ever acquired, subscriber data portability and non-use commitments in this policy would be binding on any acquiring entity as a condition of transfer.

03 — Payments

We don't touch your revenue.

Paid subscriptions are processed by Stripe. When you connect your Stripe account to Forme, subscriber payments go directly to your Stripe account. We never have access to your subscribers' payment card numbers, bank accounts, or financial information.

We receive only a confirmation that a subscription was created or renewed. We take 0% of your subscription revenue. The subscription revenue relationship is between you and your subscriber, facilitated by Stripe.

Your own subscription to Forme (the $19 or $59 monthly fee) is also processed by Stripe. We store only your subscription status and renewal date — not your payment details.

04 — Cookies & tracking

Minimal and purposeful.

We use session cookies for authentication. We do not use third-party advertising cookies. We do not use analytics services that track users across sites.

If we add analytics in the future, they will be privacy-preserving, self-hosted, and limited to aggregated usage data that cannot identify individual users. We will update this policy before doing so.

We do not use Google Analytics, Meta Pixel, TikTok Pixel, or any other behavioral tracking service. Your readers are not surveilled on your behalf.
05 — Data retention

We keep it until you don't need us to.

Your account data is retained while your account is active. When you delete your account, we delete your data within 30 days, except where retention is required by law (typically financial records related to your subscription payments).

Server logs are retained for 30 days. Encrypted draft content is retained until you delete it — we cannot read it, but we do store it.

Before deleting your account, you can export everything: your posts, your subscriber list, your publication settings. We provide these in standard, open formats. Nothing locks you in.

06 — Your rights

Access, portability, deletion.

You have the right to access the personal data we hold about you, to request a copy in a portable format, to correct inaccuracies, and to request deletion.

Most of these rights are exercisable directly in your account settings without contacting us. For requests that require our involvement, email us at hello@forme.press and we will respond within 5 business days.

If you are located in the European Economic Area, you have additional rights under the GDPR. If you are a California resident, you have rights under the CCPA. We honor these rights for all users regardless of location.
07 — Disclosure

When we might share data.

We do not sell your data. We share it only in the following limited circumstances:

Service providers

We use a small number of infrastructure providers — hosting, email delivery, payment processing. These providers process data only as necessary to provide those services and are bound by contractual data protection obligations.

Legal requirements

We may disclose data if required by a valid court order or legal process. We maintain a warrant canary at forme.press/security — a cryptographically signed statement that we have not received classified government requests. If that signature stops updating, it signals we have been silenced.

For encrypted drafts: we cannot disclose what we cannot read. A valid legal order for encrypted draft content would produce only ciphertext — unreadable without your private key, which lives on your device and not on our servers.
08 — Changes

We'll tell you before anything changes.

If we make material changes to this policy — changes that affect what data we collect, how we use it, or who we share it with — we will notify you by email at least 30 days before the changes take effect.

You can always review the current version of this policy at forme.press/privacy. Questions or concerns: hello@forme.press