Form Builder

Frequently asked questions

Where do I get a target address?

The target address is the place that receives the submissions — AlpenApps never sees any of them. There are three common ways: a small script on your own web space that forwards the details by email (ask your web host what they offer for this); the form feature of your shop or website system, if it accepts submissions from a form of your own; or a form service that gives you an address for your form and delivers every submission by email. Use an address starting with https:// so the details are sent encrypted, and check that the field names match what the receiving side expects.

Why a privacy policy checkbox — and what must the policy say?

Anyone who collects personal data through a form must inform the senders at the time of collection under Art. 13 GDPR: who is responsible, for what purpose and on what legal basis the details are processed, who receives them (such as your web host or the form service), whether they leave the EU, how long they are kept and which rights the senders have. The checkbox links to your own privacy policy, and the form can only be sent once it is ticked — so everyone sees the notice first. Add a section about this form there; if in doubt, your legal adviser can tell you what applies in your case.

How does the spam trap work?

The form contains a field called _gotcha that visitors can neither see nor reach with the keyboard; screen readers skip it. Many spam programs fill in every field they find in the source code. So discard every submission in which _gotcha is not empty when you receive it — some form services do this on their own, check their instructions. The trap does not help against targeted attacks; that takes checks on the receiving side, such as a limit on submissions per hour.

What happens to my data?

The form is made in your browser; what you enter is not sent to any server. Only when you are signed in does it save itself as a “Form” entry in your account (servers in Frankfurt), so you can change it later. What your visitors type into the finished form goes straight to your target address — never through AlpenApps.