SignatureCraft is built around a simple privacy premise: the app you build your signature in makes no server calls of its own. This page explains exactly what that means and the narrow set of cases where data does leave your browser.
1. What we don't collect
Building a signature, previewing it, exporting it, generating a QR code, and saving/resuming your work via a shareable URL all happen entirely client-side. We do not run analytics on your signature content, do not store your name, title, contact details, or any signature content on a server, and do not have a user account database.
2. What we do collect — and only in these cases
If you purchase the full library unlock ($19):
- Payment and billing details are collected and processed by Paddle.com Market Limited, our payment processor and Merchant of Record. Paddle's own privacy policy governs that data — see paddle.com/legal/privacy. SignatureCraft never receives or stores your card details.
- Your email address, as provided to Paddle at checkout, is used to correlate your purchase with a license and, if you use the “resend my license” recovery feature, to look up and re-deliver your license file.
- A license record is created with our licensing provider, Keygen.sh, tagged with your transaction ID and a random correlation token generated by your browser — not your name or email directly.
If you use the “resend my license” recovery feature:
- The email address you enter is sent to our server to look up your Paddle purchase and, if found, to send you your license file via our transactional email provider, Resend.
- We do not store the email you enter for recovery beyond what is needed to process that single request and apply basic abuse-prevention rate limiting (see below).
3. License storage on your device
Once activated, your license file is stored in your browser's localStorage. It stays on your device and is never transmitted anywhere as part of normal use. Clearing your browser storage or switching devices means the app can no longer see it — use the recovery feature to get a fresh copy.
4. Abuse prevention
The license recovery endpoint applies a lightweight, short-lived rate limit keyed to the email address submitted, to prevent automated abuse of an otherwise unauthenticated form. This data is not retained beyond the rate-limit window and is not used for any other purpose.
5. Third parties we rely on
- Paddle — payment processing, tax handling, purchase receipts (Merchant of Record).
- Keygen.sh — license issuance and verification infrastructure.
- Resend — delivery of license-recovery emails.
- Vercel — hosting for the app and its minimal server routes.
None of these providers receive your signature content. Each acts as a data processor for the narrow purpose described above.
6. Your rights (EU/EEA users, GDPR)
Because we hold so little personal data ourselves — no account database, no signature content, no stored payment details — most of your purchase-related personal data is held by Paddle as an independent controller for payment/tax purposes. To exercise access, correction, or erasure rights over that data, contact Paddle directly, or contact us and we will coordinate on your behalf. You may also request deletion of any data associated with a license-recovery request by contacting us at the email below.
7. Contact
Questions about this Privacy Policy: andrewfragkiadakis+signaturecraft@gmail.com.