Privacy
FormSlug is a Google Workspace Marketplace add-on for Google Forms. This page describes what data FormSlug stores, how it’s used, and the rights you have over it. It complements the legal Privacy Policy at formslug.com/privacy.
What FormSlug stores
Section titled “What FormSlug stores”Information you provide by signing in and using FormSlug:
- Your identity — your Google Workspace email address and display name, plus your Workspace domain.
- Your workspace — domain name, plan tier, billing status, and admin/manager/member assignments.
- Your slugs — slug name, destination Google Forms URL, optional label, optional UTM parameters (Business plan), status (active or paused), and click count.
- Aggregate click counts — how many times each slug has been visited, and the daily breakdown over the last 30 days.
FormSlug does not store:
- The contents or responses of your Google Forms.
- Visitor identity for analytics — no cookies, no device fingerprints, no cross-site tracking.
- Anything from your Google Drive, Gmail, Calendar, or other Workspace apps.
What’s logged on each click
Section titled “What’s logged on each click”When a visitor opens a slug URL, FormSlug:
- Checks whether the slug exists and is active.
- Increments the click counter for that slug.
- Redirects the visitor to the configured Google Form URL.
FormSlug does not record visitor identity for analytics or share it with third parties. Standard Cloud Run access logs (timestamp, slug, IP, HTTP status) are retained briefly for abuse handling and rate-limit enforcement, and are not exposed in any analytics surface.
Where data lives
Section titled “Where data lives”| Data type | Location |
|---|---|
| Workspaces, members, slugs, click counts | Firestore — EU multi-region (eur3, Belgium / Netherlands) |
| Application backend | Google Cloud Run — Belgium (europe-west1) |
| Billing | Stripe |
| Dashboard (static) | Firebase Hosting (Google global CDN) |
All in-transit traffic uses TLS. Custom-domain TLS certificates are issued automatically by Caddy / Let’s Encrypt; FormSlug never serves unencrypted requests.
Limited Use Policy compliance
Section titled “Limited Use Policy compliance”FormSlug’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We only use Google user data to provide and improve the user-facing features of FormSlug.
- We do not sell or transfer Google user data to third parties for advertising, marketing, or any unrelated purpose.
- We do not use Google user data to train generalized AI/ML models.
- Human access to Google user data is restricted to (a) the user themselves, (b) cases with the user’s explicit consent, or (c) when required for security investigations, abuse handling, or to comply with applicable law.
Your rights
Section titled “Your rights”- Export your data — Use Export CSV in My slugs for slug data; open the Stripe Customer Portal from Billing for billing data.
- Delete your workspace — Open Settings in the dashboard and request workspace deletion. Data is kept for 30 days before permanent removal in case you change your mind. See About workspaces.
- Request a copy — Email
support@formslug.comand we’ll respond within 30 days.
Subprocessors
Section titled “Subprocessors”FormSlug relies on these processors to operate the service:
- Google Cloud Platform — hosting, Firestore database, Cloud Run, Firebase Hosting.
- Stripe — payment processing and invoicing.
- Google Web Risk — destination URL safety scanning.
Each is bound by their respective data processing terms.
Contact
Section titled “Contact”Questions about privacy or data handling: hello@formslug.com or support@formslug.com.