Privacy

Your forms are not our mailing list.

SubmitHarbor stores only the information needed to operate your endpoints and private inbox.

Data we process

Account sign-in provides a user identifier, name, and email address. Form endpoints store the fields submitted by your visitors, the sending origin, a shortened user-agent string, and the time received.

The signed-out demo

Submissions sent to the signed-out demo endpoint are not saved to our database. They are returned to the page you sent them from and kept in that browser's local storage until you delete them, so use the demo with test details rather than a real visitor's information.

How data is used

Data is used to authenticate you, deliver the private inbox, prevent abuse, and send notifications you configure. SubmitHarbor does not sell submission data or use it for advertising.

Control and deletion

You can delete individual submissions and endpoints from the product. Deleting an endpoint deletes the submissions currently attached to it. Contact us for account-level export or deletion assistance.

Processors

Vercel hosts the application, Firebase provides authentication and persistence, Upstash may provide rate limiting, and Resend sends notification emails when enabled.