Privacy Policy

FormaCMS · Updated 9 September 2026

FormaCMS is a visual website editor. For privacy questions or requests concerning your account, contact the FormaCMS administrator at mirallesredes90@gmail.com.

Account information

When you continue with Google, Forma receives your Google account identifier, verified email address, name and profile photo. It uses this information to create or recognize your account and display your profile to your website team. Forma requests only basic sign-in information; it does not request access to Gmail, Google Drive or your contacts. Google access tokens are used during sign-in and are not saved as account records.

If you register with a username and password, Forma stores your username and a salted password hash. Session cookies keep you signed in for up to eight hours. Signing out clears the session in that browser.

Websites and teams

Forma stores connected website addresses, repository information, team membership, invitations and saved content. GitHub authorization is used to inspect the repositories you allow and install the website connection. Published page changes and published news or products are public so your website can display them. Collection drafts and team records are kept in private server storage. Unsaved page drafts are stored in your browser.

Members of the same website team can see your display name, profile photo, online status, current page and selected element. Presence updates while the editor is visible; an inactive profile stops appearing online after about 75 seconds. Invitation links grant access to their intended website when accepted, so share them only with the person you want to invite.

Website statistics

Published websites connected to Forma load a small connector script that sends an anonymous pageview beacon to Forma: the page address and the referring host only. It sets no cookie and stores no visitor identifier, IP-derived fingerprint or cross-site identifier. Aggregated counts (views per day, per page and per referrer host) are shown to the website's team in the Stats panel.

Service providers and storage

Forma runs on Vercel and uses Vercel Blob for server storage. Google handles Google sign-in and GitHub handles repository authorization. These providers process requests needed to operate the service. Hosting infrastructure may record technical request information for service operation and troubleshooting. Forma uses account data for authentication, website editing and team collaboration, not advertising.

Keeping and removing information

Account records, website content and memberships remain stored until removed by the administrator or the applicable management controls. Invitation links expire after seven days. Moving news or products to Trash hides them from the website but preserves their stored content so they can be restored; Trash is not permanent deletion.

You can ask the administrator for access to, correction or deletion of your account information using the email above. There is currently no automatic account-deletion button. Removing Google access in your Google account prevents further Google authorization but does not itself delete your Forma records. Content already published to a website or committed to GitHub may need to be removed separately by its owner.

Updates

This page will be updated if Forma's data handling changes. The date above identifies the current version.