06 — Reference · Security & Privacy

Privacy is the default.

FormPing is built in Switzerland, runs on a privacy-aligned infrastructure, and treats every submission as sensitive by default. Here's what that means in practice.

Encryption at rest

Submission contents are encrypted server-side before they're written to storage. If the database were leaked, the attacker would see encrypted blobs and nothing else. This is encryption at rest — it protects against database breaches, not against server-side access.

Encryption in transit

Every connection to FormPing — dashboard, widget, API, mobile apps — uses TLS. The widget refuses to load over plain HTTP, and the API only accepts HTTPS.

Bot protection

Every form is protected against automated submissions out of the box — no captcha required, no extra setup on your side. The protection runs server-side, so it can't be bypassed by a bot that talks to the API directly.

Domain allowlist

Each token has a list of domains it's allowed to be embedded on. Submissions from any other origin are rejected with a 403. Lock this down before going live to prevent abuse if your token leaks.

Account security

• Two-factor authentication — TOTP-based, works with any standard authenticator app.
• Active devices — see and revoke every active session from the dashboard. Revocation is instant.
• Account locking — repeated failed login attempts lock the account temporarily.
• Disposable email blocking — registration rejects throwaway email providers.

Notification content

Push notifications contain the sender's name and a short preview only. The full submission contents stay encrypted in storage and are only decrypted when you view them in the dashboard or a logged-in mobile app.

Data residency & the Swiss posture

FormPing is operated from Switzerland by a Swiss company under Swiss law. Data processing is GDPR-compliant. We don't sell data, we don't run third-party trackers inside the dashboard or the widget, and we don't share submission contents with anyone.

Subprocessors

We use a small, deliberately short list of infrastructure providers (edge hosting, mobile push). The full, current list is published in our Data Processing Addendum on formping.ch.

Deleting your data

• Per submission — delete from the inbox or archive at any time.
• Per token — deleting a token deletes every submission it ever received.
• Whole account — Settings → Account → Delete account. Cancel any active subscription first.