With sharepa your pages, your account and your form entries live in data centres in the EU. We follow data protection rules, from where data is stored to when it's deleted. sharepa is run by a sole proprietorship in Switzerland.
What you get
- Peace of mind with customer data: whatever visitors type into your forms stays in the EU.
- Less data protection paperwork: no cookies for analytics, and a data processing agreement is already included.
- Clear deletion periods: deleted pages are gone for good after 30 days, and old addresses stay blocked for a year.
- No fraud in your name: every page is checked when it's published, and no page can send typed-in data to other servers.
- Cautious defaults: new pages stay out of Google and can't be embedded until you want them to.
What it can't do
- There's no end-to-end encryption. sharepa can technically read a page's code and password; not looking at password-protected pages is a rule we keep, not a technical barrier.
- Pages containing a password field only go live after a manual review, since phishing pages always need one.
- You can't wire up outside services such as your own API or a form service.
Questions
Do these protections cost extra?
No. Everything on this page applies to every account, free or one-time plan.
Where exactly is the data stored?
With Cloudflare, in EU storage. Links on your pages are checked against Google Safe Browsing when you publish, and a test browser opens the page once before it goes live.
Who can see my form entries?
Only you, in your app. The MCP server in Claude or ChatGPT can't read them.
Is there a data processing agreement?
Yes. The DPA is part of the terms of service and covers every account, with nothing to sign.