Privacy by default

Six defaults on every form and every plan, free ones too.

Agent002 keeps what people type into your form, and nothing else. There’s no setting to find and no plan to pay for: the defaults below are simply how every form works.

Start free GDPR checklist

New response: Event feedback

Received just now

Name: Jane Doe
Email: jane@example.com
Would come again: Yes
IP address: not recorded
Device: not recorded
Location: not recorded
Cookies: none
Tracking: none
Stored in: Germany, EU

You get what people typed. We never record the rest, not even for ourselves.

The six defaults

We compared 13 popular form tools in October 2026 and didn’t find another visual form builder with all six on by default, on every plan.

No cookies

Forms set no cookies at all, also when embedded on your site, so they need no cookie banner.

No IP addresses

We never store the IP address, browser or device of the people who answer. To stop floods, the address is held briefly in memory, then forgotten.

Hosted in the EU

Every account on our servers in Germany. Answers leave the EU only if you send them somewhere yourself, such as a Google Sheet.

No Google CAPTCHA

Agent002 Silent Check stops spam with a puzzle the browser solves, so nothing goes to Google or Cloudflare.

No tracking pixels

Nobody can add Meta, Google or other trackers to a form, us included. Forms load nothing from other companies.

Answers that delete themselves

Choose how long to keep answers, from a week to 5 years. Older ones are deleted automatically, on our side too, and leave our backups within 14 days.

And a few more

No AI on answers

Answers aren’t read by AI, used to train it or sent to AI services.

Files kept safe

Files people send are scanned for viruses on our own servers, stored encrypted, and only your team can download them.

Your privacy notice

Link your privacy notice at the bottom of every form, one click away for the people who answer.

No phishing forms

Forms that ask for passwords or card numbers are blocked before they go live.

Forms on their own address

Forms are served from f.agent002.net, under a strict security policy that lets only our own code run.

Counts, not tracking

Form owners see how often a form was opened and sent, as totals per day: no cookie, no identifier, nothing about any one person.

Check it yourself

Data processing termsApply to every account, with nothing to sign.
Sub-processorsEvery company that handles data for us, and where.
SecurityEncryption, backups, access and how to report a problem.
GDPR checklistWhat’s left for you to do as a form owner.

Questions

Do I need a cookie banner for your forms?

Not for our forms. They set no cookies and load nothing from other companies, also when embedded in your site, so there’s nothing for a banner to ask about.

Is it GDPR compliant?

Agent002 is built for the GDPR: we act as your processor under data processing terms that apply automatically, store everything in the EU, collect nothing beyond the answers, and delete old answers on the schedule you set. The rest depends on how you use it, so we keep a short checklist for form owners.

Where are the answers stored?

On our servers in Germany, in the EU. Every company that handles data for us is on our sub-processors page.

Make your first form in five minutes

Free for personal use. Businesses get 14 days of Starter, no card needed.

Start free