Privacy

It is never sent. Opening, displaying, placing a signature and exporting all happen in your browser, on your own machine. The site has no route that accepts a document, so nothing can receive one by accident, and nothing about it is stored. Closing the tab erases it.

This is the only piece of data that crosses the network, and it crosses encrypted. The photograph stays on the phone: the ink is cut out on the device, and only the resulting stroke, a transparent image, is sent.

It is sealed with AES-GCM before it leaves, using a key drawn by your computer and carried in the fragment of the QR code's address. A browser never sends a fragment to a server, so the key never reaches ours: what the store holds is bytes it cannot read. The session lives five minutes at most, can be claimed by a single device, and is deleted the instant your computer collects it.

Exporting a signed PDF sends one number, the count of signatures embedded, which feeds the total shown in the header. The request carries nothing else: no file name, no page count, no size, no identifier. That total is the only durable value this site stores.

No advertising cookie, no tracker, no analytics. One cookie holds the language you picked so the choice survives your next visit, and your browser remembers the light or dark theme locally. Nothing else.

The routes used by the scan flow and by the counter are rate limited, which means your IP address is held for the length of a short window and then expires on its own. It is never tied to a document or to a signature.

The site is served by Vercel, and the ephemeral store is Upstash Redis. Both see the traffic any host sees. Neither ever sees a document, because none is sent.

There is no account, no profile and no personal data held here, so there is nothing to hand back, correct or delete. The one thing that could identify you, your IP address, expires by itself within minutes.