A privacy-first form builder. No cookies, no fingerprinting, no analytics.
GhostForm is a privacy-first form builder. We handle submissions server-side, encrypt sensitive data, and give you full control. No tracking, no cookies, no JavaScript required.
Build forms with standard field types. Server-first validation. Works without JavaScript.
No cookies, no fingerprinting, no analytics. IPs only for rate limiting. GDPR-friendly by design.
View submissions in a clean interface. Encrypted at rest. Auto-delete options.
POST endpoints, webhooks, and JSON exports. Works with any framework.
Standard HTML form action URLs. No JavaScript required.
Protect your forms from spam and abuse with configurable per-IP rate limits. Set submissions per hour for each form.
Build your form with our simple builder.
Copy the HTML and add it to your site.
Get submissions via webhook or API.
Use native form elements. No frameworks required.
Each form has its own endpoint.
Receive submissions instantly via webhooks.
Export all submissions as JSON.
Full REST API access for programmatic form management.
Server-side validation rules with custom error messages.
GhostForm never sets cookies.
We don't collect browser fingerprints.
IP addresses are only stored for rate limiting (abuse prevention), never for tracking or analytics.
All submissions are encrypted.
You own all your data. Export or delete anytime.
Transparent codebase. Audit and verify our privacy claims.