Privacy Policy

FormGuard — Contact Form Spam Blocker

Last updated: August 2026

What we collect

FormGuard collects anonymous spam event data only. When a contact form submission is checked, we record whether it was flagged as spam or valid, and the reason (honeypot, timing, or keyword match). No personal information from the form (name, email, phone, message content) is stored.

Merchant data

Merchants can configure a list of blocked keywords through the admin dashboard. These keywords are stored in a database scoped to each individual store. We also store a simple on/off preference for spam protection.

Customer data

FormGuard does not collect, store, or process any customer personal data. No names, emails, IP addresses, or form contents are saved. The spam check runs entirely in the browser and only an anonymous pass/fail result is sent to our server.

Data sharing

We do not sell, share, or transfer any data to third parties.

Data retention

Anonymous spam event records are automatically deleted after 90 days. The dashboard only ever reports on the last 7 days. When a merchant uninstalls the app, all their data (keywords, settings, and spam events) is permanently deleted immediately.

GDPR compliance

FormGuard responds to all mandatory Shopify GDPR webhooks:

• Customer data request — No customer data to export.
• Customer data erasure — No customer data to delete.
• Shop data erasure — All store data is permanently deleted.

Contact

For questions about this privacy policy, contact us at shettynick2@gmail.com.