Privacy Policy

1. Overview

MPH Form Relay ("we," "us," the "Service") is a self-hosted contact-form relay: account holders create "endpoints" and embed a snippet on their own website, and submissions to that form are relayed by email and stored so the account holder can review them. This policy explains what data we collect, why, how it's used, and the choices available to you.

2. Who this applies to

This policy covers two groups: (a) people who create an MPH Form Relay account ("account holders"), and (b) people who submit a form on someone else's website that happens to be relayed through MPH Form Relay ("submitters"). Submitters never sign up for or interact with MPH Form Relay directly — their data passes through our service because an account holder embedded our endpoint on their own site. Account holders are responsible for informing their own site's visitors that a third-party service processes form submissions.

3. What we collect

For account holders, we collect:

• Name and email address, either entered directly at signup or provided by Google when you sign in with Google
• A securely hashed password, if you sign up with email/password (we never store or have access to your plain-text password)
• Email verification status and timestamps
• The endpoints you create: name, destination email address, configuration settings (allowed origins, rate limits, spam-protection settings), and creation/update timestamps
• Basic technical logs (login timestamps, IP address at signup) used for account security and abuse prevention

For submitters (people filling out a form on an account holder's site), we collect:

• Whatever fields the form itself asks for (commonly name, email, and a message — determined entirely by the account holder's form, not by us)
• IP address, user agent, and referring page URL, collected automatically on every submission for spam and abuse prevention

4. How we use it

Submitted form data is relayed by email to the destination address the account holder configured, and is also stored so the account holder can view submission history in their dashboard. Account data is used to authenticate you, operate your endpoints, secure your account, prevent abuse of the Service, and communicate with you about your account (for example, email verification and security notices). We do not sell personal data to third parties, we do not use submission content or account data for advertising, and we do not use the data for any purpose beyond operating and improving the Service.

5. Use of Google user data

If you choose to sign in with Google, we request only the minimal OAuth scopes needed for authentication: your name, email address, and basic profile information (openid, email, profile). We do not request access to your Gmail, Google Drive, Contacts, Calendar, or any other Google service or data beyond basic sign-in identity. Google user data obtained through this Service is used solely to create and authenticate your account — it is never sold, never used for advertising, never shared with third parties for their own purposes, and never read or used by any human at MPH Form Relay except as strictly necessary to provide customer support you request, to maintain the security and proper functioning of the Service, or to comply with applicable law. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. Cookies and sessions

We use a single first-party session cookie to keep you signed in. It is strictly functional — we do not use tracking, advertising, or third-party analytics cookies on this Service.

7. Third parties involved

• Google — if you sign in with Google, used only as described in Section 5
• Email delivery — outbound relay emails, verification emails, and notifications are sent through a Gmail account we control, solely to deliver the email itself

We do not use any third-party analytics, advertising, or tracking services on this Service.

8. Data retention and deletion

We retain account and submission data for as long as your account is active, or as needed to provide the Service to you. To request deletion of your account or any data associated with it, contact us at the email below — we will delete or anonymize your data within a reasonable time, except where we're required to retain it to comply with legal obligations. We do not currently offer automated self-service deletion.

9. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us at the email below and we will respond within a reasonable time.

10. Security

Passwords are hashed, never stored in plain text. All traffic to the Service is encrypted in transit (HTTPS). We apply rate-limiting and automated spam detection to submissions. No system is perfectly secure, however — please don't submit sensitive information (passwords, financial details, government ID numbers) through any form relayed by this Service.

11. Children's privacy

This Service is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page.

13. Contact

Questions about this policy, or requests regarding your data, can be sent to jayspromptworkshop@gmail.com.