This is important! Thanks for asking!<p>For non-technical users, we offer the ability to generate a key pair for you.  But for more advanced (or more privacy-conscious) users, we offer the ability to upload your public key (which is used to encrypt the form data).<p>As far as decryption goes, form data is stored in our backend and you can decrypt it via the web app if you trust that we don&#x27;t upload your private keys.  We don&#x27;t upload them—they&#x27;re  all stored in your browser&#x27;s localstorage—but if you want to use the web app, you still have to trust us (if you&#x27;re unable to verify that we don&#x27;t upload them).<p>The nice thing though, is that you don&#x27;t need to use our web app to decrypt the messages—you can use any PGP-enabled email app, or the command line.  We send all encrypted forms to you, via email, so you can choose how to decrypt them using your private keys.<p>So, you can use PrivateForms in a way that you don&#x27;t need to trust us at all. It&#x27;s all &quot;host-proof&quot; in the way described here: <a href="https:&#x2F;&#x2F;www.passpack.com&#x2F;blog&#x2F;2008&#x2F;03&#x2F;host-proof-hosting&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.passpack.com&#x2F;blog&#x2F;2008&#x2F;03&#x2F;host-proof-hosting&#x2F;</a>