Draft for legal review. Not yet in force.
Privacy
Last updated 18 October 2026
Accounts
An account holds an email address and a display name from sign-in. Sign-in runs on Firebase Authentication.
Replies
Replies are stored for the workspace that owns the form, and only its members can read them.
Alongside each reply: the time, the page it came from, the browser, and a hashed address that cannot be read back. These stop abuse and spam.
Where data goes
Data sits in a Postgres database run for Tikka. Email goes out through Amazon SES. A form owner can send replies on to their own tools, such as Google Sheets, Slack or a webhook.
Removing replies
Anyone who answered a form can ask for their replies to be removed by email. A workspace owner can delete replies, forms or the whole workspace.
Cookies
Sign-in and the chosen workspace are kept in cookies. Hosted forms keep progress on the device so a long form can be finished later.
Questions
Write to hello@tikka.cloud.