This is really cool! One suggestion - don't expose when 'identical form exists' on duplicate creator names. This can be de-anonymizing, because I can put some (fictitious) 'target's name into that box and see if they made a form using your service. Also it's not clear to me why it's necessary to have a creator name in the first place.