Data handling

Privacy

The service keeps form handling intentionally narrow.

Submissions are stored so messages can be reviewed and retried. Stored records include the configured site id, submitted fields, page URL if provided, delivery status, and provider response.

The Worker does not intentionally archive visitor IP addresses, user agents, cookies, or Turnstile response tokens. Remote sites should avoid collecting sensitive information unless it is genuinely needed.

Retention

Archived copies are kept in the configured Cloudflare R2 bucket until removed by the service operator.

Access

Administrative archive access requires a bearer token.

Processors

Submissions may pass through Cloudflare services and the configured outbound mail provider.