Our privacy promise

Submit Kit does not intentionally store form submission content after delivery.

What that means precisely

• There is no submissions database, and no message queue holding your content.
• Request bodies are never written to logs.
• Names, email addresses, and message text never appear in our logs or metrics.
• Submitted content is never included in error reports or alerts.
• We do not log raw IP addresses. Abuse controls use a keyed hash that changes daily.

What we do record

One short line per request, kept briefly for troubleshooting and abuse handling:

• A request identifier
• Which form was used
• A timestamp
• The outcome, such as delivered or rejected
• A coarse reason code

What we will not claim

We will not tell you that your messages are anonymous or untraceable, because that would not be true. Your email is delivered across infrastructure operated by Cloudflare, Amazon Web Services, and whoever runs your mailbox, and each of those performs its own operational processing and keeps its own records.

What we can honestly promise is narrower and, we think, more useful: this application is built so there is no copy of your submission left with us.