To prevent abuse, an automated safeguard checks whether an unusual number of forms are sent from the same source. For that purpose an unreadable, hashed version of the IP address is stored.
This hash is used solely for spam detection. The IP address is combined with a secret salt and hashed with SHA-256. The hash reduces privacy risk, but remains a technical identifier that I secure and use only for abuse detection.
The system also checks whether a person appears to be using the form. It briefly inspects technical browser information such as device type, submission time, and a few anonymous connection characteristics.
I do not set advertising or tracking cookies. Security providers may process strictly necessary technical data. These checks exist solely to keep the form working properly and to block spam.
I do not see this behavioural data myself and I do not use it for any other purpose.