Short version: FormSlug does not read, store, or process the content of your Google Forms or the responses submitted by your form respondents. We only handle the data strictly necessary to make branded redirect links work.
FormSlug is a Google Workspace Add-on operated by Creytens.com BV, a company incorporated in Belgium (KBO/BCE nr. 0423.339.078, VAT nr. BE0423339078), with registered address at Sint-Michielslaan 2, 8200 Brugge, Belgium.
Questions about this policy can be directed to: privacy@formslug.com
When you install and use FormSlug, we collect and store:
Legal basis: Performance of a contract (Art. 6(1)(b) GDPR): this data is necessary to provide the FormSlug service.
If you join our waitlist before the product launches, we collect your work email address. This is shared with Brevo, our newsletter platform, solely to send you product updates and launch notifications.
Legal basis: Consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time by unsubscribing via the link in any email we send.
When a visitor follows one of your branded links, we record a click event against that slug. We do not log or store raw IP addresses, browser fingerprints, or any data that could identify individual visitors. Visitor IPs used for rate-limiting purposes are immediately hashed (SHA-256) and never stored in any persistent form.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR): to provide accurate click analytics and to protect the service from abuse.
Payment card details and billing information are handled exclusively by our payment processor. FormSlug stores only a customer reference ID and subscription ID. No raw card numbers are held by FormSlug. VAT is collected in compliance with EU regulations.
We use a privacy-first, cookieless analytics tool to understand aggregate traffic to formslug.com. It does not collect personally identifiable information and is fully GDPR-compliant. No cookie consent banner is required.
When you install the FormSlug add-on inside Google Forms, Google asks you to grant a small set of permissions. We request only what is strictly necessary to make the add-on work:
FormSlug never accesses Drive, Gmail, Calendar, or any Google Workspace product other than the Form you have open. The full list of scopes is shown on the Google consent screen when you install the add-on.
All FormSlug data is stored in cloud infrastructure located in the European Union. Rate-limiting cache is also hosted in the EU. No personal data is transferred outside the EU/EEA except as follows:
We retain your workspace data for as long as your account exists. Cancelling a paid subscription drops your workspace to the Free plan: your slugs are deleted, any custom domain is disconnected, and all team members other than the workspace administrator are removed (Free is single-user). Only the administrator's Free workspace remains, on which you can create new slugs up to the Free limit. If you choose to delete your workspace (Settings → Danger zone), your slugs, members, and custom domain are removed immediately and the remaining workspace data is retained for 30 days, after which it is permanently deleted. You may request early deletion at any time (see section 7).
Waitlist email addresses are retained until you unsubscribe, or until you request deletion.
We do not sell, rent, or trade your personal data. We share data only with the categories of sub-processors necessary to operate the service:
A full list of sub-processors is available on request at privacy@formslug.com.
As a data subject under the GDPR, you have the right to:
To exercise any of these rights, contact us at privacy@formslug.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données): www.dataprotectionauthority.be
FormSlug does not use tracking cookies. The analytics tool used on formslug.com is cookieless by design. We may use strictly necessary session cookies for authentication when you are logged in to the FormSlug dashboard; these are not used for tracking and do not require consent.
We apply industry-standard security measures including HTTPS everywhere, server-side authentication via Google OAuth, rate limiting, abuse detection, and access controls on all internal systems. We undergo regular security reviews.
FormSlug is a business tool intended for use by adults operating Google Workspace accounts. We do not knowingly collect personal data from children under 16.
We may update this policy from time to time. When we make material changes, we will update the "Last updated" date at the top and notify active users by email at least 14 days before the changes take effect.
Google, Google Workspace, and Google Forms are trademarks of Google LLC. FormSlug is an independent product and is not affiliated with, endorsed by, or sponsored by Google LLC. All other trademarks referenced on this site are the property of their respective owners.
FormSlug's use of information received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.
Specifically: FormSlug does not use any data obtained from Google Workspace APIs (including Google Forms data and account information) to develop, improve, or train generalized artificial intelligence (AI) or machine learning (ML) models. We do not transfer such data to third parties for the purpose of training generalized AI or ML models, and we do not use it to provide a customized experience offered by a third-party AI/ML model. FormSlug itself does not use AI or ML to process the form data, slug data, or analytics events that we collect.
Creytens.com BV
Sint-Michielslaan 2, 8200 Brugge, Belgium
KBO/BCE nr. 0423.339.078, VAT nr. BE0423339078
privacy@formslug.com