Privacy Policy
Your documents stay on your device. Here is exactly what we do - and don't do - with your data.
- Last updated
- Applies to
- Everyone using formbarn.com
- Questions
- Ask us directly
- Local by default
- Your drafts sit in your browser's localStorage, on your device, not on our servers.
- Never stored
- We build your PDF in memory and drop it. We keep no copy of your document.
- You're in control
- No accounts. No tracking until you say yes. Clear everything whenever you want.
Introduction
FormBarn is a free legal-document generator: a Motor Vehicle Bill of Sale builder and a Residential Lease Agreement builder. This policy covers what you type, where it stays, and the few moments when any of it touches our servers. The short version: there are no accounts, your documents stay in your browser, and we never store the contents of your documents.
Information We Collect
We never store your documents
When you click download, what you typed goes to our server, becomes a PDF, and comes back to you. We handle it in memory only and write nothing to disk. We never store, log, or share the contents of your documents.
1. Document data you enter
Your browser saves everything you type into a builder - names, addresses, vehicle details, lease terms, and so on - straight into its own localStorage on your device. None of it comes to us as you type, and we cannot see it.
Your document data reaches our server in exactly one situation: when you click download, so the server can render the PDF you asked for. The server handles it entirely in memory, sends the finished PDF back to your browser, and retains nothing afterwards.
2. Anonymous visitor identifier
On your first visit we generate a random, anonymous UUID and store it in your browser's localStorage. It holds no personal information and is not linked to your identity. We use it, together with your IP address, only for rate limiting and abuse prevention: enforcing the daily PDF download limit, for example. Clear your browser data and it is gone.
3. Contact form
Write to us through the contact form and the name, email address, subject, and message you give us come to our inbox through Resend, a third-party transactional email provider. Resend processes the message only to relay it to us and keeps it briefly in its normal delivery logs. We keep your message only as long as we need it to answer you.
4. Push notifications, if you turn them on
Turn on browser push notifications and your browser issues a push subscription endpoint, which we store so we can deliver the notifications you opted in to. The endpoint holds no personal information. You can unsubscribe at any time in your browser's notification settings, and we delete subscriptions once they stop working.
5. What we collect automatically
- Google Analytics shows us how visitors use the site: pages visited, time spent, browser type, and rough location at country or city level. It runs in consent mode and stays non-personalized by default.
- Your IP address works together with the anonymous visitor UUID to hold PDF generation to fair-use rate limits and to prevent abuse. IPs may appear briefly in server logs and in memory while the rate-limit window is open.
- Our hosting infrastructure may log ordinary request metadata - paths, user agents, timestamps - for security and performance.
How We Use Your Information
We use what we collect to:
- render and return the PDF documents you explicitly request
- auto-save your drafts on your own device so you can come back later
- respond to messages you send via the contact form
- deliver the push notifications you opted in to receive
- analyze aggregate usage patterns and improve the service
- prevent abuse and enforce rate limits, using your IP address and anonymous UUID
- comply with legal obligations
We do not sell, rent, or trade your personal information. Ever.
Consent Management
On your first visit you get a consent box. Until you answer it, analytics runs in non-personalized mode without advertising cookies, and no advertising cookies are set. Google Consent Mode v2 and Google's consent management platform do the work behind it.
What the box asks depends on where you are. In the European Economic Area and the UK it is a dialog with a plain choice: accept or decline analytics and advertising cookies. We remember your answer, and you can change it at any time by clearing your browser cookies and revisiting the site, which brings the dialog back. This is how we meet the GDPR consent requirement.
In the United States you get a privacy notice instead. It describes your rights regarding the sale or sharing of personal information and gives you a way to opt out, which is what US state privacy laws (including the CCPA and CPRA) call for.
Third-Party Services
Google Analytics
Google Analytics collects anonymous usage statistics using cookies. Consent mode governs those cookies, and they stay non-personalized by default. You can also opt out with the Google Analytics Opt-out Browser Add-on.
Google AdSense
When advertising is enabled on the site, Google AdSense may display the ads that keep the service free. Google and its partners use cookies to serve and measure ads, and personalized advertising cookies are only set after you provide consent where required by law. Manage your preferences at Google Ads Settings.
Messages from the contact form reach us through Resend, which processes them only for delivery and retains them briefly in standard delivery logs.
Push notifications, if you opted in, travel over the Web Push protocol through the push service your browser vendor runs (for example, Google's FCM for Chrome, Apple's APNs for Safari, Mozilla's autopush for Firefox). Those services receive only the encrypted notification payload and a routing identifier, never your personal data or document content.
The site itself is served through a hosting provider and content delivery network that may log standard web request metadata (IP address, user agent, request path) for security and performance purposes.
We are not responsible for the privacy practices of these third-party services, and we encourage you to read their privacy policies.
Data Storage and Security
Your document drafts and anonymous visitor UUID live in your browser's localStorage and nowhere else. We have no access to them, and they stay on your device until you clear your browser data.
For PDF generation, our server works on your document data in memory only: it writes nothing to disk, logs nothing, and drops the data as soon as your PDF is on its way back to you.
Everything moving between your browser, our servers, and our service providers is encrypted using HTTPS/TLS, and we apply appropriate technical and organizational measures to protect the limited data we handle.
Your Rights
There is very little for us to hand over or delete, so most of what the GDPR, the CCPA/CPRA, and similar laws give you is already covered:
Access
Your document data sits on your own device, where you can read it at any time.
Deletion / Erasure
Clear your browser's localStorage (or site data for formbarn.com) to delete your drafts and anonymous UUID. Email us to have contact-form correspondence deleted.
Opt-out
Change your analytics and advertising cookies in the consent dialog, in your browser settings, or with the Google opt-out tools linked above.
Data portability
Download your document as a PDF whenever you want. Nothing is locked in.
If you are in the EEA or the UK, you also have the right to lodge a complaint with your local supervisory authority. And for California residents, we do not sell personal information as defined by the CCPA/CPRA.
Children's Privacy
FormBarn is not intended for children under 13 years of age, and we do not knowingly collect personal information from children under 13. Bills of sale and lease agreements are contracts between adults.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, the new version goes up on this page and the "Last updated" date above changes with it. Where it is reasonable, we highlight material changes on the site.
See also our Cookie Policy and Terms of Service.
Questions about your privacy?
If you have any questions about this Privacy Policy or how your data is handled, contact us at [email protected].