We collect less
than you think.
Most privacy policies describe what companies do with your data. This one also explains what we technically cannot do — because of how we built the system.
We run no ads. We have no advertising relationships. No ad networks receive your data.
No Google Analytics. No Meta Pixel. No behavioral tracking of any kind on the marketing site.
Encrypted drafts are locked before they reach our servers. We receive a ciphertext we cannot open.
The short list.
We collect only what we need to provide the service. We do not collect data for advertising, resale, or any purpose beyond operating forme.
Your list is your list.
When you use forme, your subscribers sign up for your publication — not for a relationship with us. We store their email addresses and subscription status to operate the service. We do not use that data for any other purpose.
We do not send marketing emails to your subscribers. We do not sell, share, or license their data to any third party. We do not analyze their behavior across publications.
If we were ever acquired, subscriber data portability and non-use commitments in this policy would be binding on any acquiring entity as a condition of transfer.
We don't touch your revenue.
Paid subscriptions are processed by Stripe. When you connect your Stripe account to Forme, subscriber payments go directly to your Stripe account. We never have access to your subscribers' payment card numbers, bank accounts, or financial information.
We receive only a confirmation that a subscription was created or renewed. We take 0% of your subscription revenue. The subscription revenue relationship is between you and your subscriber, facilitated by Stripe.
Your own subscription to Forme (the $19 or $59 monthly fee) is also processed by Stripe. We store only your subscription status and renewal date — not your payment details.
Minimal and purposeful.
We use session cookies for authentication. We do not use third-party advertising cookies. We do not use analytics services that track users across sites.
If we add analytics in the future, they will be privacy-preserving, self-hosted, and limited to aggregated usage data that cannot identify individual users. We will update this policy before doing so.
We keep it until you don't need us to.
Your account data is retained while your account is active. When you delete your account, we delete your data within 30 days, except where retention is required by law (typically financial records related to your subscription payments).
Server logs are retained for 30 days. Encrypted draft content is retained until you delete it — we cannot read it, but we do store it.
Before deleting your account, you can export everything: your posts, your subscriber list, your publication settings. We provide these in standard, open formats. Nothing locks you in.
Access, portability, deletion.
You have the right to access the personal data we hold about you, to request a copy in a portable format, to correct inaccuracies, and to request deletion.
Most of these rights are exercisable directly in your account settings without contacting us. For requests that require our involvement, email us at hello@forme.press and we will respond within 5 business days.
When we might share data.
We do not sell your data. We share it only in the following limited circumstances:
Service providers
We use a small number of infrastructure providers — hosting, email delivery, payment processing. These providers process data only as necessary to provide those services and are bound by contractual data protection obligations.
Legal requirements
We may disclose data if required by a valid court order or legal process. We maintain a warrant canary at forme.press/security — a cryptographically signed statement that we have not received classified government requests. If that signature stops updating, it signals we have been silenced.
We'll tell you before anything changes.
If we make material changes to this policy — changes that affect what data we collect, how we use it, or who we share it with — we will notify you by email at least 30 days before the changes take effect.
You can always review the current version of this policy at forme.press/privacy. Questions or concerns: hello@forme.press