Privacy Policy

Last updated: July 14, 2026

1. Who We Are

WikiForms is an open-source volunteer project hosted on Wikimedia Toolforge. It is not affiliated with or endorsed by the Wikimedia Foundation.

Developer: Anaf Ibn Shahibul · Source code on GitHub

2. What Data We Collect

• Wikipedia username — via MediaWiki OAuth 2.0 when you log in. We never receive or store your password.
• Form content — titles and questions you create, encrypted with AES-256-CBC before storage.
• Form responses — answers submitted to forms, visible only to the form owner and authorized collaborators.
• Session cookie — a temporary cookie to keep you logged in during your visit.

3. What We Do NOT Collect

• No email addresses or personally identifiable information (PII)
• No Google Analytics, Google Ads, or third-party tracking
• No IP address logging beyond standard Toolforge server logs
• No data sold, shared, or used for any commercial purpose

4. Data Storage and Security

All data is stored on Wikimedia Toolforge infrastructure. Form questions are encrypted at rest. Access to responses is restricted to form owners and explicitly authorized collaborators. The full source code is publicly auditable at GitHub.

5. Cookies

WikiForms uses a single session cookie set only when you log in, used solely to authenticate your requests, and deleted when you log out. No tracking or advertising cookies are used.

6. Third-Party Services

WikiForms uses MediaWiki OAuth 2.0 via meta.wikimedia.org for authentication only. The Wikimedia Foundation Privacy Policy applies to that step.

7. Toolforge Compliance

WikiForms operates in compliance with the Wikimedia Cloud Services Terms of Use. Form creators are responsible for ensuring their forms do not collect PII as defined therein.

8. Your Rights

• Delete any forms you created at any time
• Request deletion of all your data via Wikipedia talk page or GitHub Issues