1. Who is responsible
The controller of your personal data is Hold My Form LLC. For anything about your data, write to privacy@holdmyform.com.
2. Joining the waitlist
When you join the waitlist we store:
- your email address;
- whether you ticked "I build websites for clients";
- when you joined, and the page you sent the form from;
- your IP address, which limits how often one address can submit the form;
- the country your IP address points to, as Cloudflare works it out. We do not ask for it, and it can be wrong, for example behind a VPN. We use it only to see roughly where sign-ups come from.
We use this for one thing: to write to you once, when your place is ready. No newsletter, and nothing is sold or shared for anyone else's purposes. The legal basis is your request to join.
The submission is stored in a database kept in the European Union, and a notification with the same details is emailed to our own mailbox so that we see it.
3. Visit statistics
The site loads a statistics script from collect.grrow.online (Growth Engine). It sets no cookies and does not fingerprint your device. It records page views and these steps: the pricing page opened, the waitlist page opened, the first thing typed into a waitlist form, and a completed sign-up. With each it records the page's path, and the campaign parameters, ad click id, landing address and referrer that came with your visit. What you type is not recorded.
Until you answer the banner, nothing is written to your browser and each page is counted on its own. If you say yes, the script keeps one entry in your browser's local storage, _ge: a random visitor id and where your visit started, so that a sign-up can be linked to the search or ad that brought you. It is kept for at most 13 months. Your answer itself is remembered under hmf-consent, so you are not asked on every page.
The site also remembers whether you chose the light or dark theme, in your browser only. It sets no cookies.
4. Who handles the data for us
- Cloudflare, Inc. serves the site and runs the form backend. It processes connection data, such as your IP address, to deliver pages and protect the site. Waitlist sign-ups are stored in a Cloudflare database restricted to the EU. Cloudflare also delivers the notification email.
- Google provides the mailbox where the notification email arrives.
- Growth Engine, at
collect.grrow.online, receives the visit statistics in section 3. It is run by doop Osakeyhtiö in Finland on its own server, and sends the data to nobody else.
Cloudflare and Google are based in the United States. Where data leaves the EU, it is covered by the European Commission's standard contractual clauses.
5. How long we keep it
- Waitlist sign-ups: until we have sent you the one email, then deleted. Earlier if you ask.
- The identifier in your browser, if you said yes: at most 13 months.
- Visit statistics: kept as marketing history, without anything that names you.
6. Your rights
You may ask what we hold about you, and have it corrected or deleted. You may object to its use, restrict it, or receive a copy. Write to privacy@holdmyform.com; we answer within a month. You may also complain to a data protection authority, in Finland the Office of the Data Protection Ombudsman (tietosuoja.fi).
7. Changes to this policy
This policy was last updated on 4 October 2026. If a change affects you, the new date is shown at the top of this page.