[{"data":1,"prerenderedAt":377},["ShallowReactive",2],{"kc-/knowledge/self-hosted-forms":3,"kc-clusters-/knowledge/self-hosted-forms":116,"kc-related-/knowledge/self-hosted-forms":117},{"id":4,"title":5,"author":6,"body":7,"date":79,"description":80,"draft":81,"extension":82,"faqs":83,"image":93,"isPillar":81,"meta":94,"navigation":95,"path":96,"pillar":97,"pillarName":98,"seo":99,"sources":100,"stem":109,"tags":110,"takeaways":114,"updated":79,"__hash__":115},"knowledge/knowledge/self-hosted-forms.md","Self-Hosted Forms: Own Your Form Data","RoundPushPin Team",{"type":8,"value":9,"toc":71},"minimark",[10,14,19,26,30,42,46,52,56],[11,12,13],"p",{},"A self-hosted form runs on infrastructure you control, with responses stored in your own database rather than a vendor's cloud. It is the most direct form of data ownership: no third party sits between you and your respondents' answers.",[15,16,18],"h2",{"id":17},"what-does-self-hosted-actually-mean","What does \"self-hosted\" actually mean?",[11,20,21,25],{},[22,23,24],"strong",{},"It means you run the form application and its database on servers you choose — your own cloud account, a private server, or on-prem — instead of submitting data to a SaaS vendor's platform."," The form still works the same for respondents; the difference is custody. With a hosted tool the vendor holds the data and you access it through their product; self-hosted, you hold it.",[15,27,29],{"id":28},"why-does-self-hosting-matter-for-privacy","Why does self-hosting matter for privacy?",[11,31,32,35,36,41],{},[22,33,34],{},"Because it removes a party from the data path and puts residency in your hands."," Where data is stored and transferred is a real concern under regimes like the GDPR, whose Chapter V governs transfers of personal data across borders. When you self-host, you decide which region and provider hold the data, rather than inheriting a vendor's choices — which simplifies ",[37,38,40],"a",{"href":39},"/knowledge/form-data-ownership","data ownership and privacy"," generally.",[15,43,45],{"id":44},"what-are-the-trade-offs","What are the trade-offs?",[11,47,48,51],{},[22,49,50],{},"Self-hosting trades convenience for control."," You run the infrastructure — updates, backups, uptime — which a fully-managed SaaS handles for you. The upside is ownership: direct database access, your own residency and retention rules, and no vendor lock-in. Good tooling narrows the gap; a one-command Docker setup and a typed schema (via tools like Drizzle) make running your own stack far less work than it used to be.",[15,53,55],{"id":54},"how-roundpushpin-does-self-hosting","How RoundPushPin does self-hosting",[11,57,58,66,67,65],{},[22,59,60,61,65],{},"RoundPushPin is self-hosted: a Docker Compose file brings up the app with PostgreSQL in one command, so every response lands in a relational database you own and can ",[37,62,64],{"href":63},"/knowledge/query-form-data-with-sql","query with SQL","."," You get the conversational experience of a hosted tool with the ownership of running your own — the foundation for ",[37,68,70],{"href":69},"/knowledge/gdpr-compliant-forms","GDPR-compliant forms",{"title":72,"searchDepth":73,"depth":73,"links":74},"",2,[75,76,77,78],{"id":17,"depth":73,"text":18},{"id":28,"depth":73,"text":29},{"id":44,"depth":73,"text":45},{"id":54,"depth":73,"text":55},"2026-03-06","Self-hosted forms run on your own infrastructure, so responses live in a database you control rather than a vendor's cloud. This guide explains what self-hosting means, the trade-offs, and why it matters for data ownership.",false,"md",[84,87,90],{"q":85,"a":86},"What does a self-hosted form mean?","It means the form application and its database run on infrastructure you control, so responses are stored in your own database rather than a vendor's cloud. Respondents see the same form; you hold the data.",{"q":88,"a":89},"Are self-hosted forms worth the trade-off?","If data ownership, residency, or privacy matter, usually yes. You take on running the infrastructure, but you gain direct database access, your own retention rules, and no vendor lock-in. Good tooling narrows the operational gap.",{"q":91,"a":92},"How do I self-host RoundPushPin?","RoundPushPin ships with a Docker Compose setup that brings up the app and PostgreSQL in one command, so every response lands in a relational database you own and can query with SQL.","/images/knowledge/self-hosted-forms.png",{},true,"/knowledge/self-hosted-forms","form-data-ownership","Privacy & data ownership",{"title":5,"description":80},[101,105],{"title":102,"url":103,"publisher":104},"Regulation (EU) 2016/679 (GDPR) — Chapter V, transfers of personal data to third countries","https://eur-lex.europa.eu/eli/reg/2016/679/oj","EUR-Lex, European Union",{"title":106,"url":107,"publisher":108},"Drizzle ORM — Overview","https://orm.drizzle.team/docs/overview","Drizzle","knowledge/self-hosted-forms",[111,112,113],"self-hosted","data ownership","data residency",[],"RzL7AxN_kbM3NSnZ9kp1aFZ7xi-3lBJgfjrKMeMLoUQ",[],[118,239],{"id":119,"title":120,"author":6,"body":121,"date":210,"description":211,"draft":81,"extension":82,"faqs":212,"image":222,"isPillar":81,"meta":223,"navigation":95,"path":69,"pillar":97,"pillarName":98,"seo":224,"sources":225,"stem":232,"tags":233,"takeaways":237,"updated":210,"__hash__":238},"knowledge/knowledge/gdpr-compliant-forms.md","How to Build GDPR-Compliant Forms",{"type":8,"value":122,"toc":204},[123,126,132,136,159,163,176,180,186,190],[11,124,125],{},"A GDPR-compliant form collects personal data lawfully, takes only what it needs, tells people what you'll do with it, and lets you honor their rights over that data. The form tool can't make you compliant on its own, but its design and where it stores data make compliance much easier or much harder.",[127,128,129],"blockquote",{},[11,130,131],{},"This is general information about GDPR concepts, not legal advice. Confirm your specific obligations with a qualified professional.",[15,133,135],{"id":134},"what-does-gdpr-require-of-a-form","What does GDPR require of a form?",[11,137,138,139,142,143,146,147,150,151,154,155,158],{},"At a high level, the GDPR's Article 5 principles mean a compliant form should: have a ",[22,140,141],{},"lawful basis"," for collecting the data (consent, contract, legitimate interests, etc., per ICO guidance), collect ",[22,144,145],{},"only what's necessary"," (data minimisation), be ",[22,148,149],{},"transparent"," about purpose, keep data only ",[22,152,153],{},"as long as needed"," (storage limitation), and keep it ",[22,156,157],{},"secure",". People also have rights — access, rectification, erasure — that you must be able to act on.",[15,160,162],{"id":161},"how-do-you-design-a-form-for-data-minimisation","How do you design a form for data minimisation?",[11,164,165,166,170,171,175],{},"Ask less. Every field should map to a real, stated purpose; if you can't name why you need it, drop it or defer it. Practically that means cutting optional fields, avoiding \"nice to have\" questions, and using ",[37,167,169],{"href":168},"/knowledge/conditional-logic-in-forms","conditional logic"," so people only answer what applies. Minimisation is both a legal principle and a ",[37,172,174],{"href":173},"/knowledge/form-completion-rate","completion-rate"," win.",[15,177,179],{"id":178},"how-do-consent-and-retention-work-on-a-form","How do consent and retention work on a form?",[11,181,182,185],{},[22,183,184],{},"Consent must be specific, informed, and freely given — a pre-ticked box doesn't count."," In practice, that's a clear, unbundled opt-in next to a plain-language purpose, plus a link to your privacy notice. Retention means deciding up front how long you keep each response and being able to delete it on request — which is far easier when the data sits in a database you can query and delete from directly.",[15,187,189],{"id":188},"how-roundpushpin-helps-with-gdpr-compliant-forms","How RoundPushPin helps with GDPR-compliant forms",[11,191,192,198,199,203],{},[22,193,194,195,197],{},"Because RoundPushPin is ",[37,196,111],{"href":96}," with responses in your own PostgreSQL database, you control the data path, residency, retention, and deletion directly — no third-party submissions store to reason about."," Combined with data-minimising ",[37,200,202],{"href":201},"/knowledge/conversational-form-design","conversational design",", it gives you the technical foundation to build compliant forms; the policies and lawful basis remain yours to define.",{"title":72,"searchDepth":73,"depth":73,"links":205},[206,207,208,209],{"id":134,"depth":73,"text":135},{"id":161,"depth":73,"text":162},{"id":178,"depth":73,"text":179},{"id":188,"depth":73,"text":189},"2026-03-04","Building GDPR-compliant forms means collecting only what you need, on a lawful basis, with clear consent and control over retention. This guide covers the principles that apply and how a self-hosted, relational form helps you meet them.",[213,216,219],{"q":214,"a":215},"How do I make a form GDPR-compliant?","Collect data on a lawful basis, take only what you need, be transparent about purpose, keep it only as long as necessary, secure it, and be able to honor access and deletion rights. The tool helps, but the policies are yours. This is general information, not legal advice.",{"q":217,"a":218},"Do I need consent for a form?","Only if consent is your lawful basis — there are others, such as contract or legitimate interests. When you do rely on consent it must be specific, informed, and freely given, with no pre-ticked boxes. Confirm your basis with a professional.",{"q":220,"a":221},"How does self-hosting help with GDPR?","Self-hosting puts the data path, residency, retention, and deletion under your control, with no third-party submissions store to account for. It's a strong technical foundation, though compliance still depends on your policies.","/images/knowledge/gdpr-compliant-forms.png",{},{"title":120,"description":211},[226,228],{"title":227,"url":103,"publisher":104},"Regulation (EU) 2016/679 (GDPR) — Article 5, principles relating to processing",{"title":229,"url":230,"publisher":231},"Lawful basis for processing","https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/lawful-basis/","Information Commissioner's Office (ICO)","knowledge/gdpr-compliant-forms",[234,235,236],"gdpr","privacy","compliance",[],"DGrXe9Lk9CMOY7LwUCgCMT0x5pAMGjiqSDCTl-qWFUQ",{"id":240,"title":241,"author":6,"body":242,"date":338,"description":339,"draft":81,"extension":82,"faqs":340,"image":348,"isPillar":81,"meta":349,"navigation":95,"path":350,"pillar":351,"pillarName":352,"seo":353,"sources":354,"stem":366,"tags":367,"takeaways":372,"updated":338,"__hash__":376},"knowledge/knowledge/building-trust-in-forms.md","How to Build Trust in Your Forms (So People Complete Them)",{"type":8,"value":243,"toc":331},[244,247,251,262,266,284,288,299,303,313,317],[11,245,246],{},"A form asks people to hand over their data, and people only do that for a site they trust. Trust isn't a nice-to-have on a form — it's a precondition for completion, and it's especially fragile the moment you ask for something personal.",[15,248,250],{"id":249},"why-does-trust-matter-for-form-completion","Why does trust matter for form completion?",[11,252,253,256,257,261],{},[22,254,255],{},"Because submitting a form is an act of trust, and doubt converts directly into abandonment."," When credibility is low, people hesitate, skip fields, or leave — and the effect is sharpest on sensitive questions, where distrust drives both refusals and inaccurate answers (Tourangeau & Yan, 2007). Earning trust isn't separate from conversion; it ",[258,259,260],"em",{},"is"," part of conversion.",[15,263,265],{"id":264},"what-makes-a-form-look-trustworthy","What makes a form look trustworthy?",[11,267,268,271,272,275,276,279,280,283],{},[22,269,270],{},"The elements people notice, and the meaning they assign to them."," Fogg's ",[258,273,274],{},"Prominence-Interpretation Theory"," (2003) explains online credibility as a two-step process: a person has to ",[22,277,278],{},"notice"," an element (prominence), then ",[22,281,282],{},"interpret"," it as good or bad. So trust on a form is built from noticeable, positively-interpreted cues — a clean, professional design, a real organization clearly behind the form, plain language, and no jarring or excessive questions (Nielsen Norman Group). Sloppiness and surprises read as risk.",[15,285,287],{"id":286},"how-do-you-reassure-people-about-their-data","How do you reassure people about their data?",[11,289,290,293,294,298],{},[22,291,292],{},"Tell them what you'll do with it, why you're asking, and prove you ask for little."," Concretely: state the purpose in plain language, link a privacy notice near the submit action, keep the form ",[37,295,297],{"href":296},"/knowledge/what-to-ask-on-a-form","minimal",", and when you must ask something sensitive, explain why and place it late — after the person has invested effort. Transparency is what lowers the refusals that distrust causes (Tourangeau & Yan, 2007).",[15,300,302],{"id":301},"do-trust-signals-actually-change-behaviour","Do trust signals actually change behaviour?",[11,304,305,308,309,312],{},[22,306,307],{},"Yes — but only the ones people notice and believe."," Prominence-Interpretation Theory is a useful filter: a trust cue does nothing if it isn't noticed, and backfires if it's interpreted as hollow. Genuine signals (a real company, a clear privacy explanation, a short honest form) beat generic badges. Test which cues move ",[37,310,311],{"href":173},"completion rate"," for your audience rather than assuming.",[15,314,316],{"id":315},"how-roundpushpin-helps-you-earn-trust","How RoundPushPin helps you earn trust",[11,318,319,322,323,326,327,330],{},[22,320,321],{},"RoundPushPin supports trustworthy forms by default: clean conversational design, minimal relevant questions, and self-hosted data you genuinely control."," Because responses live in ",[37,324,325],{"href":96},"your own database",", \"we keep your data private\" isn't a slogan — you decide where it lives and how long you keep it, which is the substance behind ",[37,328,329],{"href":69},"GDPR-compliant"," trust claims.",{"title":72,"searchDepth":73,"depth":73,"links":332},[333,334,335,336,337],{"id":249,"depth":73,"text":250},{"id":264,"depth":73,"text":265},{"id":286,"depth":73,"text":287},{"id":301,"depth":73,"text":302},{"id":315,"depth":73,"text":316},"2026-03-16","People won't hand over data to a form they don't trust. This research-backed guide covers how visitors judge credibility, the trust signals that matter on forms, and how to reassure people about their data.",[341,343,345],{"q":250,"a":342},"Filling in a form means handing over data, which people only do when they trust the site. Low credibility raises hesitation and abandonment — and on sensitive questions, distrust increases refusals and misreporting.",{"q":265,"a":344},"Credibility comes from elements people notice and judge positively — clear design, a real organization behind it, plain language about why you ask, visible privacy/security cues, and no surprising or excessive questions.",{"q":346,"a":347},"How do you reassure people about their form data?","Tell them plainly what you'll do with it and why each question is asked, link a privacy notice, keep the form minimal, and place any sensitive question late with an explanation. Transparency reduces refusals.","/images/knowledge/building-trust-in-forms.png",{},"/knowledge/building-trust-in-forms","conversational-form-design","Conversational form design",{"title":241,"description":339},[355,359,362],{"title":356,"url":357,"publisher":358},"Fogg, B. J. (2003) — Prominence-Interpretation Theory: explaining how people assess credibility online","https://doi.org/10.1145/765891.765951","CHI '03 / Stanford Web Credibility Project",{"title":274,"url":360,"publisher":361},"https://www.nngroup.com/articles/prominence-interpretation-theory/","Nielsen Norman Group",{"title":363,"url":364,"publisher":365},"Tourangeau, R. & Yan, T. (2007) — Sensitive questions in surveys","https://doi.org/10.1037/0033-2909.133.5.859","Psychological Bulletin","knowledge/building-trust-in-forms",[368,369,370,371],"trust","credibility","conversion","research",[373,374,375],"People only submit data to a form they trust — low credibility raises hesitation and abandonment.","Credibility is what users notice and how they interpret it (Fogg's Prominence-Interpretation Theory).","Reassure with clear purpose, visible privacy cues, minimal asks, and sensitive questions placed late.","tzUin9YU-8HMjkplypyURGhSFed0__aoIDxr88QnEPQ",1780692425633]