Privacy Policy
Last updated: 2 November 2026
What we collect
When you create a document, the details you type (names, contact details, job, change, amount) and the signatures are sent over HTTPS to our server on Cloudflare, where the PDF is generated and stored so that both people can download the same signed copy. Each document is linked to an anonymous account that is just a random private key saved in your browser; we do not ask for your name, email or password. When the other party signs, we record the time, their country (from their network) and a one-way hash of their IP address as an audit trail. Documents are kept for up to 2 years unless you delete them sooner in My documents. We never sell, share or use your documents for advertising.
Your business name, contact and account key are also saved in your browser's local storage so you don't retype them.
Hosting
The site is hosted by Surge (surge.sh), which may log standard technical data such as IP address and pages requested.
Payments
PayPal payments are handled by PayPal under its own privacy policy; we receive the payment confirmation and the details PayPal shares with sellers. We do not see or store your card details.
Cookies and analytics
We use Google Analytics (GA4) only if you click Accept on our cookie banner. Before you choose, and if you click Reject, Google Analytics is not loaded and no analytics cookies are set (we use Google Consent Mode with all storage denied by default). If you accept, Google Analytics sets cookies such as _ga and _ga_* (up to 2 years) to measure pages viewed, approximate location, device and browser type, processed by Google under its privacy policy. We never use advertising cookies, and the details and signatures you enter in the app are never sent to Google.
Your choice is saved in your browser's local storage (key sc_consent), not in a cookie. The app also uses local storage for your private account key and saved form details. You can change your choice at any time with Cookie settings in the footer of every page; if you withdraw consent, you can also delete existing _ga cookies in your browser settings.
If you email us, we keep the conversation to answer you. We never sell your data.