Threat Model & Best Practices

At ANON::form, we design our service to maximize your communication secrecy, privacy and anonymity when submitting forms. However, no tool can offer 100% protection against every possible threat. In this white paper, we explain what ANON::form protects you from, where there are limits, and how you can enhance your own security when using the service.

Show subscriptions

Threat Model

What ANON::form Protects Against

Private Form Submissions

• Form submissions do not record submitter IP addresses or other metadata.
• Submitted data is End-to-End encrypted and only accessible by the form data receiver.

No Third-Party Tracking

• ANON::form does not embed tracking scripts, analytics, or external services that could expose your activity to third parties.

No Data Retention

• No form data is saved in our systems, not on disk, nor in any system logs.

What ANON::form Cannot Fully Protect Against

Network Monitoring (Without Tor or VPN)

• Your internet provider (ISP) or network administrator can still see that you visited ANON::form unless you use Tor or a VPN.
• The content of your form submissions is End-to-End encrypted, but the fact that you connected to the site may still be visible.

Device Compromise

• If your device is infected with malware or spyware, anything you type (including form responses) could be intercepted before they are submitted.
• For especially sensitive submissions, consider using a secure, clean device.

Legal Requests in Finland

• ANON::form operates under the jurisdiction of Finland and the autonomous Åland Islands, which are part of the European Union.
• While we not collect any user data, we may be legally required to comply with court orders that could require future monitoring.
• However, our data minimization practices (no IP logging, no cookies) mean we have little to provide in most cases.

Highly Targeted Surveillance

• If you are a high-risk user (e.g., journalist, activist, or whistleblower facing a powerful adversary), ANON::form should be just one part of your security plan.
• Combine ANON::form with tools like VPN, Tor Browser , secure operating systems (Tails or Whonix ), and encrypted communications (ProtonMail) for stronger protection.

Best Practices for Using ANON::form

1. Use Tor or a VPN
   Access ANON::form using Tor or a reputable VPN if anonymity is critical.
2. Avoid Personal Information
   Don’t include your name, contact details, or identifying information in your forms unless absolutely necessary.
3. Use Secure Devices
   For highly sensitive submissions, consider using a clean, disposable device (like a fresh install of Tails OS).
4. Stay Informed
   Follow trusted privacy and security resources to stay aware of new threats and recommended tools.

Final Note

ANON::form is designed to provide strong privacy for most users and scenarios, but true anonymity requires careful behavior and the right tools. We strongly recommend combining ANON::form with other privacy-preserving technologies when facing serious threats.

If you have any questions, you can always contact us through our secure contact form.