Privacy Policy

Updated March 27 2026

Who We Are

FormDumpling is a lead intelligence tool that helps website owners automatically categorise, filter, and prioritise form submissions. We are operated by Noodle ("we", "us", "our").

If you have questions about this policy, contact us at thomas@formdumpling.com.


What Data We Collect

From website visitors (end users)

When FormDumpling's script is installed on a website, we collect the following data from visitors who submit a form:

  • Form submission content — the text entered into form fields (e.g. name, email, message)
  • Behavioural signals — time spent on the page, typing patterns, field interaction events, and page navigation prior to submission
  • Traffic source — referrer URL, UTM parameters, and session origin (e.g. organic search, paid ads, direct)
  • Device and browser metadata — browser type, operating system, screen resolution, and language settings
  • IP address — used for spam detection and approximate geolocation (country/region level)

From FormDumpling account holders (customers)

When you create a FormDumpling account, we collect:

  • Account details — name, email address, and password (managed via Clerk)
  • Website details — domain(s) you connect to FormDumpling
  • Usage data — feature usage, dashboard activity, and feedback you provide

How We Use Your Data

We use collected data to:

  • Classify form submissions — categorise leads as sales enquiries, partnership requests, job applications, or spam using AI models and behavioural signals
  • Provide lead intelligence — surface context such as traffic source, page engagement, and visitor intent to help you prioritise responses
  • Improve accuracy — during the beta phase, submission data may be used to train and refine our classification models
  • Operate and improve the product — monitor system performance, fix bugs, and develop new features
  • Communicate with you — send account-related emails, product updates, and support responses

We do not use your data for advertising. We do not sell or trade your data. Ever.


Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) or United Kingdom, we process data under the following legal bases:

Processing activityLegal basis
Spam detection and lead classificationLegitimate interest
Account creation and product deliveryContractual necessity
Product improvement and model training (beta)Legitimate interest
Marketing communicationsConsent

Data Retention

  • Form submission data is retained for as long as your account is active, or as needed to provide the service
  • Account data is retained until you delete your account
  • Anonymised or aggregated data may be retained indefinitely for analytical purposes

You may request deletion of your data at any time. See Section 8.


Data Sharing

We do not sell, rent, or trade your data to third parties.

We may share data with trusted service providers who help us operate FormDumpling, including:

  • Clerk — authentication and user account management
  • Cloud infrastructure providers — hosting and data storage
  • AI model providers — for processing form submission classification

All third-party providers are bound by data processing agreements and are prohibited from using your data for their own purposes.

We may disclose data if required by law or to protect the rights, safety, or property of FormDumpling or its users.


Data Security

FormDumpling uses end-to-end encryption to protect data in transit from the moment it leaves your visitor's browser until it reaches you. Data at rest is encrypted using industry-standard protocols.

Access to personal data is restricted to authorised personnel only.


Your Rights

Depending on your location, you may have the following rights:

  • Access — request a copy of the personal data we hold about you
  • Correction — request that inaccurate data be corrected
  • Deletion — request that your data be deleted
  • Portability — receive your data in a structured, machine-readable format
  • Objection — object to processing based on legitimate interest
  • Restriction — request that processing be limited in certain circumstances

To exercise any of these rights, email us at thomas@formdumpling.com. We will respond within 30 days.


Cookies and Tracking

FormDumpling's script uses cookies and local storage to:

  • Maintain session continuity across page visits
  • Track behavioural signals associated with form interactions
  • Attribute traffic sources accurately

These are functional cookies necessary for the service to operate. We do not use advertising or third-party tracking cookies.


Children's Privacy

FormDumpling is not intended for use by individuals under the age of 16. We do not knowingly collect data from children.


Changes to This Policy

We may update this policy from time to time. When we do, we will update the date at the top of this page. For significant changes, we will notify you by email.


Contact

For any privacy-related questions or requests:

Email: thomas@formdumpling.com