Who we are

This privacy policy applies to Website Form Checker, which operates the marketing website at https://websiteformchecker.com and the form-monitoring service that customers subscribe to from it. The two are different in how they collect and use data, and this policy covers both. If you have questions about how we handle your data, contact us at [email protected].

Overview

To run the service, we collect or process information in four categories:

  • Information you give us directly. When you complete a form on this website, run a free form audit, enroll a URL in the free trial, or subscribe to a paid plan.
  • Technical information your browser sends automatically. Your IP address, browser version, operating system, language, and the page you came from.
  • Aggregate analytics. Which pages are popular, how long visitors spend, broad device categories. Non-identifying.
  • Operational data from the monitoring service. This is the largest category for active customers. See the next section.

This privacy policy sets out what we collect under each category, how we use it, how long we keep it, and what rights you have.

How we collect your information

We collect information in three ways: data you choose to give us, a limited amount of technical data your browser sends automatically, and operational data generated by running the monitoring service you subscribed to.

Information you give us

When you submit a form on this website (including the free audit at /check), we receive whatever you typed into it. Our forms ask for things like your email address and the URL you want audited or monitored. If you've never submitted a form or signed up, we have no personal information about you.

We do not collect payment card details. When you pay for a subscription, you're redirected to Stripe's secure checkout page, your card details go to Stripe, not to us. We only see the outcome (succeeded / failed) and the basic order details Stripe shares back with us.

Information your browser sends

When any web browser loads a page, it tells the server certain technical details, your IP address, browser version, operating system, language, and the page you came from. We log this for security purposes (to detect abuse, debug errors, and rate-limit the free audit endpoint) and we use a privacy-first analytics tool to understand traffic patterns in aggregate. We don't link this data to identified individuals.

Operational data from form monitoring

To deliver the service, we visit URLs you've enrolled in monitoring and submit a real, tagged test message through the contact form on each page. We then record the response. Each submission contains:

  • The sender name Website Form Checker Monitor.
  • Our sender email [email protected].
  • A placeholder phone number where the form requires one.
  • A message body identifying the submission as automated, with a unique tracking ID (WFC-YYYY-MM-DD-S{site_id}-{hash}) you can filter on.
  • For free-trial submissions only: the name and email of the person who enrolled the URL, plus a one-click opt-out link.

The test message contains no personal information about you (the customer) and no personal information about any third-party visitor. It identifies itself unambiguously as automated. After each submission we capture run logs (HTTP status, duration, success/failure), a post-submission screenshot of the page, and (for paid tiers) a periodic structural snapshot of the form so we can detect drift. This data relates to your URL. We retain it so we can show you what changed, what failed, and why.

Cookies and similar storage

This site sets no first-party tracking cookies. Our analytics provider is cookieless. The only cookies set in connection with this site are Stripe's, and only when you begin a payment, plus a local-storage entry that remembers any cookie-consent choice. For details, see our Cookie Policy.

How we use your data

We use your information to:

  • Respond to enquiries you send us through the contact or audit form.
  • Deliver the monitoring service you've signed up for (including billing through Stripe).
  • Email you alerts when we detect that your form has stopped delivering submissions.
  • Send transactional emails such as receipts, account notifications, and replies to your messages.
  • Monitor and improve the site using aggregate, non-identifying analytics.
  • Maintain the security of our servers and detect abuse of the free audit endpoint.

We never sell, rent, or share your personal information with third parties for advertising or marketing purposes. The only third parties involved are the service providers we rely on to operate the site, listed below.

Service providers we use

  • Hetzner Online GmbH, the hosting provider where our servers physically live. Our infrastructure runs in Hetzner's data center in Falkenstein, Germany. For EU and UK visitors, this means your data does not leave the EEA. For US customers, this means a cross-border transfer to Germany, a jurisdiction with strong data-protection law (the EU General Data Protection Regulation, GDPR). See Hetzner's privacy policy.
  • Umami, privacy-first analytics. We run a self-hosted Umami instance on our own Hetzner infrastructure, so your analytics data never leaves our servers. Umami does not set cookies and does not collect personal identifiers.
  • Stripe, processes payments. When you pay, your card details go directly to Stripe; we never see them. See Stripe's privacy policy.
  • Postmark, transactional email delivery (alert notifications, conversion emails, receipts, replies). See Postmark's privacy policy.
  • CapSolver, automated solving of captchas (reCAPTCHA, hCaptcha, Cloudflare Turnstile) that protect customer forms. CapSolver receives the captcha challenge data only, never any of your personal information.
  • Anthropic, when the structural heuristics for a form check are inconclusive, we send the captured screenshot to Anthropic's Claude vision API to adjudicate success vs failure. The screenshot is of your contact page; no third-party visitor PII is involved.
  • Cloudflare. DNS, security, DDoS protection, and content delivery. See Cloudflare's privacy policy.

How long we keep your data

  • Account + subscription records: retained for as long as you are a subscriber, plus up to 7 years to match standard business-record retention and tax obligations.
  • Form-check run logs: retained for the life of the subscription so we can show you history. Screenshots are pruned after 30 days by default.
  • Free audit cache: kept for 24 hours, then evicted.
  • Server logs: rotated regularly, typically within 30–90 days.
  • Analytics: aggregate, non-identifying data only; no individual records are kept.

You can ask us to delete your information at any time, see "Your privacy rights" below.

How we protect your information

We aim to protect your personal information through a system of organizational and technical security measures designed to safeguard any personal information we process. However, no method of transmission over the internet, or method of electronic storage, is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

Our systems and services are designed with privacy in mind, and we operate a "data minimization" principle wherever possible, that is to say, we will only ever ask you for the minimum amount of information required to provide our services efficiently. We have no desire to retain (and therefore maintain) any more information than is necessary.

Your privacy rights

Depending on where you live, you may have specific legal rights regarding your personal information. We honor the following rights for all visitors, regardless of jurisdiction:

  • Right to know. You can ask us what personal information we hold about you, how we got it, and what we do with it.
  • Right to access a copy. You can request a copy of your data in a readable format.
  • Right to correct. If anything we have about you is inaccurate, you can ask us to fix it.
  • Right to delete. You can ask us to delete your information. We'll do so unless we're required to keep it (for example, billing records under tax law).
  • Right to opt out of sale or sharing. We don't sell or share your personal information for advertising. There is nothing to opt out of, but you can confirm this with us in writing.
  • Right to non-discrimination. We will not deny service, charge different prices, or provide a different level of quality because you exercised any of these rights.

To exercise any of these rights, email us at [email protected]. We will respond within 45 days. We may need to verify your identity before acting on a request, usually by replying from the email address we have on file.

A note on form owners we test

Our free 30-day trial enrolls a contact form for periodic real-message test submissions through that form. The form owner may be someone other than the person who enrolled the URL. Every trial test message clearly identifies itself as automated, names the enrolling auditor, and includes a one-click opt-out URL that permanently bans the domain from any future testing by us. The opt-out is irrevocable and applies to the entire domain, not just the specific page tested.

The same situation can arise with a paid subscription: a subscriber (often an agency or web developer) may enroll a form they don't personally own, for example, when monitoring a client's contact page on behalf of that client. In those cases, the subscriber represents to us that they have the form owner's permission to enroll the URL for monitoring. We rely on that representation in good faith. If you are a form owner who didn't expect our test messages, contact us at [email protected] and we will pause monitoring on your domain while we verify with the subscriber.

When we disclose your information

We may disclose personally identifiable information to any third party only if such disclosure is required by law, or is desirable to permit us to exercise or preserve our legal rights, take action regarding potentially illegal activities, or protect the safety of any person.

Children

This website is not intended for children under the age of 13 and does not knowingly collect any personally identifiable information from children under 13. If you are a parent or guardian and believe we have collected information about your child, please contact us and we will delete it.

Links to other sites

This website contains links to other sites. Please be aware that we are not responsible for the content or privacy practices of other websites. We encourage you to be aware of when you leave our site and to read the privacy policy on each new website you visit.

Changes to this policy

We may update this privacy policy from time to time. The current version is always available at https://websiteformchecker.com/privacy.php, with a "Last updated" date at the top. If we make material changes that affect how we handle your data, we'll take reasonable steps to notify you, for example, by updating the date and, where appropriate, sending a notice or re-prompting for consent.

Contacting us about your data

Please contact us with any questions or concerns about your privacy at [email protected].