Privacy Policy
Last updated August 27, 2026.
This policy describes what FormMy.LLC collects, why, and who we share it with. It’s intentionally short. We don’t collect much.
What we collect
When you search for a business name, we record:
- The name you typed
- The state you searched
- A timestamp
- An anonymous session ID stored in a first-party cookie called
formmy_session - The page you were on when you searched, and the URL that referred you to our site
- Standard URL parameters from advertising campaigns: utm_source, utm_medium, utm_campaign, utm_term, utm_content
- The browser and device you’re using, from your user agent string
- Country only, derived from your IP address by Cloudflare. We do not store the raw IP.
When you click an affiliate “Start filing” link, we additionally record that the click happened, which partner you clicked (Northwest Registered Agent, Trademark Factory, or Dun & Bradstreet), and the state and result context. We do not pass your search history to the affiliate. They only see that you arrived from FormMy.LLC.
Google Analytics 4 also records standard page-view data such as anonymized IP, browser language, screen resolution, referrer, and page URL, subject to its own privacy practices.
What we don’t collect
- Your name, email address, phone number, or any other personal identifier
- Payment information of any kind
- Account credentials (we have no accounts)
- Precise geolocation at the city or street level
- Cross-site browsing history
- Tracking pixels from advertising networks beyond Google Analytics
Why we collect what we do
- Search records let us improve which states load fastest and which keywords drive the most useful searches
- The session ID groups your searches in one session so we can see whether you found what you needed
- UTM parameters tell us which ads or content drove the visit so we can spend marketing budget sensibly
- The country signal is a single-letter answer to “did this visit come from the US?”
Cookies we set
We set one cookie of our own: formmy_session, an anonymous UUID that groups your searches within a session so we can tell whether you found what you needed. It lasts 30 days on a rolling basis and is not tied to your identity.
Google Analytics sets its own standard cookies: _ga for visitor identification, which lasts two years, and _gid and _gat for session tracking and request throttling, which last 24 hours and one minute respectively.
We do not use tracking pixels from advertising networks, retargeting cookies, or Facebook Pixel.
Who we share data with
Running a search means sending the name you typed to the record sources that can answer the question. That is the service, not a side effect, so we would rather be specific about it than claim otherwise.
State business registries. The name and state you search go to that state’s Secretary of State (or equivalent) records system, because that is where the answer lives. Nothing about you goes with it.
OpenSOSData. For states where we do not operate our own lookup, the name and state go to OpenSOSData, a commercial records provider, which queries the state on our behalf. Again, the name and state only.
GoDaddy. When the domain check runs, the name is converted to a domain label and sent to GoDaddy’s availability API. It receives that string and nothing else.
The federal trademark check sends nothing anywhere. It runs against a USPTO dataset stored on our own server.
Affiliate partners. When you click a partner link we pass an anonymous click identifier so a commission can be attributed. Current partners are Northwest Registered Agent and Trademark Factory, both through the Awin network, and Dun & Bradstreet through Impact. The Dun & Bradstreet link additionally carries the two-letter state code and a fixed tag identifying this site, so the report can be broken out by state. No partner receives your search text, your session ID, or anything identifying you.
Google Analytics 4 receives standard event data. Where a search is involved we send the query length only, never the literal text of what you typed.
MaxMind GeoLite2 receives nothing. Country lookup runs locally against a downloaded database, so no request leaves our server.
We do not sell your data, we do not share it with advertising networks, and we do not pass your search history to affiliate partners.
Retention
Search records are retained indefinitely for internal analytics. Google Analytics retains its data per the property’s configured window (two months by default, configurable up to fourteen months). Affiliate click identifiers are meaningful only for the Awin cookie window, typically 30 to 90 days.
Your rights
You can clear the formmy_session cookie in your browser settings at any time. We honor the browser-level Do Not Track signal: when sent, we suppress the GA4 tag for that visit.
We do not sell data to anyone, period. If California or another CCPA-style jurisdiction applies to you, exercising your “do not sell” right is automatic on this site.
For any other privacy question, email admin@llcforge.com.
Changes
We’ll update this page if anything changes about what we collect or who we share it with. The “last updated” date at the top is the source of truth.