Privacy Policy

Last updated 29 August 2026

BananaForms helps website owners collect email addresses from visitors with a single tap instead of typing. This page explains what we collect, why, and what control you have. It is written to be read, not to be survived.

1. Who this applies to

Two different people use BananaForms, and they are treated differently:

• Visitors — people browsing a website that uses BananaForms. Most of this policy is about you.
• Account holders — the website owners who install BananaForms. Section 7 covers your account data.

2. What we collect from visitors

• Your email address, but only the one you chose to share, and only after you ticked the consent box on screen.
• A record of that consent — the wording shown to you, the version, and the time. This exists so that what you agreed to can be shown later.
• A device identifier stored in a cookie. It lets us recognise the same browser on a later visit so you are not asked again from scratch.
• The website you were on when you shared the address, so the right site receives it.
• Your IP address, held briefly and used only to detect and block abuse.

3. What we never do

• We never guess an address. It comes from your own browser, or from a record you previously consented to. There is no third route.
• We never use your IP address or device to reveal an address to anyone. Those signals may only be used to block abuse. This is a one-way rule and it is enforced in the product itself, not just stated here.
• We do not fingerprint your device — we do not assemble hidden technical signals into a profile that identifies you.
• We do not sell your address, and we do not hand one website's list to another.

4. Recognition across sites — the important part

This is the part that differs from an ordinary sign-up form, so we want it stated plainly rather than buried.

When you agree, your address is stored in a shared network rather than only on the one site you were visiting. If you later visit a different website that also uses BananaForms, that site can offer to reuse the address you already shared — you confirm with a tap instead of filling in a form again.

What that does not mean:

• The second website is not given your address without your confirmation on that site.
• No website is told which other sites you have visited, or which other sites you are known on. That information is never exposed.
• Nothing is shared with a site you have not interacted with.

Your browser may also ask you for permission before this works across different websites. That prompt comes from your browser, not from us, and declining it simply means the form behaves like any ordinary form.

5. How long we keep things

• Email addresses and consent records — kept while the account holder's account is active, or until you ask us to delete them.
• Detailed activity logs — kept for seven days, then discarded. Only aggregate counts are retained after that, and those contain no addresses.
• Backups — snapshots may persist for a short period after deletion before being rotated out.

6. Your choices

• Decline. Untick the consent box, or simply do not tap. Nothing is stored.
• Ask for a copy of what we hold about you.
• Ask us to delete it. We will remove your address and the records tied to it from the network.
• Unsubscribe from a particular website's emails — that is handled by that website, using the unsubscribe link in their messages.

To make any of these requests, email privacy@bananaforms.com.

7. Account holders

If you run a website that uses BananaForms, we store your email address, the domains you have registered, your settings, and the addresses collected on your sites. We sign you in with a four-digit code sent to your email address — we never store a password. You can export your data or ask us to close your account at any time.

8. Who else is involved

We keep the number of third parties small on purpose. We use a hosting provider to run the service and an email provider to send sign-in codes and notifications. We do not use advertising networks or third-party analytics trackers on this service.

9. Changes

If we change this policy in a way that affects what we collect or how recognition works, we will update the date at the top and, where the change is significant, ask for consent again rather than assuming the old one still applies.

10. Contact

BananaForms is operated by Antifragile Technologies. Questions or requests: privacy@bananaforms.com.