Privacy

SigMaker is built to know as little about you as possible. No account, no cookies, no ads, no third-party fonts or trackers.

What stays in your browser

Everything you type — name, contact details, links — and your photo are processed on your own device. They're only saved there if you turn on “Remember my details on this device”, and you can remove them any time with Clear all. Your signature itself is copied to your clipboard; we never see it.

What reaches our server, and only when you choose to

• Website preview card — if you turn it on, your website address is sent so the server can read that site's preview image and title. Nothing is stored.
• Pasted photo link — the link is sent so the server can fetch the image for your browser to crop. Nothing is stored.
• “Also host my photo online” (off by default) — your processed photo is stored at a random, unguessable public link so email apps can load it. It isn't deleted automatically; ask via feedback to have it removed.
• Feedback — your message, its type, and your email only if you add it. Stored privately; read only by the maker.

These requests carry the link in the request body, so it isn't written to access logs.

Anonymous counts

To know whether SigMaker is useful, we count two things as daily totals: that a browser visited today, and that a signature was copied or downloaded. No cookies, IP addresses or identifiers are stored — only the numbers. A date in your browser's storage prevents counting the same visit twice. If your browser sends Do Not Track or Global Privacy Control, you're not counted at all.

Site analytics

We use Vercel Web Analytics to see which pages are visited, which site sent the visitor, approximate location (country, region, city) and the kind of device, operating system and browser. It uses no cookies and stores no IP addresses; visitors can't be identified or followed across sites. Vercel recognises a returning visitor only through a hash of the request that is discarded after 24 hours. Addresses are sent without anything after “?” or “#”. Do Not Track and Global Privacy Control are respected here too.

Abuse protection

To stop bots, requests are rate-limited per network. For this, a scrambled (hashed, salted) form of the network address is kept for up to a day and then discarded. It can't be turned back into the address.

Where it runs

The site and its storage are hosted by Vercel in Frankfurt (EU). Usage counts and rate limits use Upstash Redis. Signatures created now contain their icons and photo, so they don't load anything from SigMaker when your recipients open an email.

Questions

Use Send feedback on the main page. SigMaker is built by Oved Elisha.

Last updated: October 15, 2026