Privacy policy
Version 2026-09-20.
1. Who is responsible
This service is run by the operator of this website, who can be reached at .
When someone uses the service to send you a document to sign, that person or organisation (the "sender") decides what is sent, to whom, and how long it is kept. They are responsible for that use of your data, and this service acts on their behalf. Their name and email address are shown at the top of the signing page and in the email you received.
2. Quick sign keeps nothing
The Quick sign page works entirely in your browser. The PDF you choose, your signature and the signed result are never uploaded, and nothing about them is stored or logged by this service.
3. What is stored, and why
| What | Why | How long |
|---|---|---|
| Account: name, email address, a hash of the password (never the password), when the account was created and last used | To let you sign in and to contact you about your documents | Until you delete the account |
| Documents you upload, and templates made from them | To show them to the people you ask to sign | Until you delete them, or automatic deletion does (section 5) |
| Signers: the name and email address the sender entered | To create a personal signing link and show progress to the sender | As long as the document |
| What signers place: signature picture, text, dates, check marks | To produce the signed PDF | As long as the document |
| The record of each signature and of the document's history: date and time, network (IP) address, browser description | So that a signature can be attributed and the document's history shown; printed on the signing certificate | As long as the document |
| A saved signature | Only if an account holder ticks "save for next time" | Until they forget it or delete the account |
| Sending log: recipient address, kind of email, whether it was delivered | To enforce daily sending limits and detect abuse | 90 days |
| Counters of failed sign-ins and rejected signups, by network address | To block password guessing and bots | 3 days |
| Web server logs: network address, time, page requested. Signing links are not in them: the secret part of a link is never sent to the server as part of an address. | Operation and security | As set by the hosting, usually a few weeks |
The documents' contents are not read, analysed, used for advertising or to train anything.
4. Cookies and other sites
One cookie is set, when you sign in to an account, to keep you signed in. It is necessary for that and is not used for anything else. People who only sign a document get no cookie. There are no analytics, no advertising and no social media components, and the pages load every script, font and style from this site alone. The one exception is the account signup and password-reset forms, which show a Cloudflare Turnstile check to keep bots out; Cloudflare receives your network address and browser details when that check runs.
5. Deletion
- Account holders can delete any document at any time, and the whole account with everything in it, on the Account page. Both take effect immediately.
- Completed documents are deleted automatically days after the last signature. The sender is warned a week before, and signers see the date on their download page.
- Account holders can choose automatic deletion of their completed documents after a period of their own that is shorter.
- Deleted data remains in encrypted backups for up to 30 days and is then gone from those too.
- Signups whose email address is never confirmed are removed.
A signed PDF that someone has downloaded is theirs; deleting here does not reach it.
6. Who else handles the data
The data is stored on servers rented by the operator, and emails are delivered by an email delivery provider. These are: . They act on the operator's instructions. Data is not sold, and is not given to anyone else unless the law requires it.
7. Security
Connections are encrypted. Passwords are stored only as salted hashes. Signing and download links are secrets addressed to one person: anyone who has your link can act as you, so do not forward it. No system is perfectly secure; if you believe a link or an account has been misused, tell the sender and the operator.
8. Your rights
Depending on where you live, you may have the right to see the data held about you, to have it corrected or deleted, to object to its use, to receive a copy, and to complain to a data protection authority. Account holders can do most of this themselves on the Account page. If you were asked to sign a document, ask the sender first, since the document is theirs; you can also write to the operator at .
9. Changes
When this policy changes in substance, the version date shown at the top changes with it.