Privacy policy
Last updated: 12 June 2026
TL;DR
signcraft.email is free to use. The signature editor runs in your browser — the name, role, email, photo or other details you type into it never leave your device. We collect basic technical data (IP, browser) in server logs to keep the site working. Google Analytics 4 and Google AdSense run only if you opt in — without consent, no Google script even loads. You can change your choice at any time using the Cookie settings link in the footer.
Who we are
This site is operated by Marcin Lewandowski t/a Depthia · Sole trader (UK), 66 Paul Street, London, EC2A 4NA, United Kingdom. Contact: hello@signcraft.email. We act as the data controller for personal data processed via signcraft.email. We are not required to appoint a Data Protection Officer.
UK ICO registration number: ZC164548.
Scope
This notice covers visitors worldwide. It is written to meet the UK GDPR and the EU GDPR (including the ePrivacy rules on cookies and similar storage), and includes information for visitors from the United States below.
What we collect and why
- Data you put in the editor — name, role, email, phone, photo, social URLs. This stays in your browser. We never receive it.
- Server access logs — IP address, user agent, requested URL, timestamp. Retained for 30 days. Lawful basis: legitimate interests (site operation and security).
- Analytics (only with consent) — Google Analytics 4. Page views, device class, country. Lawful basis: consent. Without consent the script is not loaded at all.
- Advertising (only with consent) — Google AdSense. Lawful basis: consent. Without consent the AdSense script is not loaded and no ads are shown.
Cookies and similar storage
signcraft.email sets no cookies and writes no non-essential storage before you give consent. The only strictly-necessary storage is your cookie choice itself. If you withdraw consent, the matching Google cookies are deleted from your browser. Change your choice at any time using the Cookie settings link (also in the footer).
| Name | Type | Category | Purpose | Duration |
|---|---|---|---|---|
| sc_consent_v1 | localStorage (first-party) | Strictly necessary | Remembers your cookie choice so we don’t ask on every page. | 12 months |
| _ga, _ga_* | Cookies (Google) | Analytics — consent only | Google Analytics 4: distinguishes visitors, measures page views. | Up to 24 months |
| __gads, __gpi, __eoi, _gcl_au | Cookies (Google) | Advertising — consent only | Google AdSense: ad delivery, frequency capping, personalisation. | Up to 13 months |
Sub-processors
- Vercel Inc. (USA) — site hosting and server logs
- Google LLC (USA) — Google Analytics 4 and AdSense (only with consent)
International transfers
Vercel and Google are based in the USA. Transfers from the UK and EEA are safeguarded by the EU Standard Contractual Clauses together with the UK International Data Transfer Addendum and, where the provider is certified, the EU–US Data Privacy Framework (and its UK Extension).
Your rights (UK & EU)
You have the right to:
- access your personal data
- rectify inaccurate data
- erase your data
- restrict processing
- port your data
- object to processing
- withdraw consent at any time
- lodge a complaint with a supervisory authority — in the UK, the ICO (ico.org.uk); in the EU/EEA, your local data protection authority (list at edpb.europa.eu)
To exercise any right, email hello@signcraft.email. We respond within one month.
Information for US visitors
We do not sell personal information, and we do not share it for cross-context behavioural advertising unless you opt in via the cookie banner. Because personalised advertising is off by default, opt-out preference signals such as Global Privacy Control are honoured by design. US state privacy laws (e.g. the California CCPA/CPRA) grant rights to know, delete and correct personal information — to exercise them, email hello@signcraft.email. We do not discriminate against anyone who exercises their privacy rights.
Children
signcraft.email is a tool for working professionals and is not directed at children. We do not knowingly collect personal information from children under 13.
Automated decision-making
We do not use automated decision-making or profiling.
Changes
We’ll update the “Last updated” date when this notice changes. Material changes will be flagged on the site for at least 30 days.