Cookie policy

The complete list

NEXT_LOCALE — set when you visit, so the site stays in the language you chose. Without it, every page would fall back to English.

__Host-hp-at and __Host-hp-rt — set only if you sign in, to keep you signed in. If you never create an account, these are never set.

That is the whole list. There is no fourth cookie.

Why there is no cookie banner

Consent banners exist because of cookies that are not necessary — advertising, profiling, cross-site tracking. We set none of those, so there is nothing to ask you about.

A banner that appears anyway, asking permission for cookies that do not exist, is theatre. We would rather show you the list.

What is stored on this site

Separate from cookies, the site keeps a short history in this browser’s local storage so you can pick up where you left off. It holds the tool id, the time, and how many files you processed.

It never holds file names or file contents. It stays in this browser’s storage and is never sent to us. Clearing your browser data removes it, and so does clearing site data for this domain. Safari, including every browser on iPhone and iPad, also deletes it after seven days without a visit unless the site has been added to the Home Screen.

If you have used a tool offline, the tool code itself is also kept in this browser’s storage. That is what makes offline use possible.

If you send a signature request, this browser also keeps that request's management link, so you can open the request again from your account page. The link is the key to the encrypted document. Removing it here only removes the shortcut; the copy in your email keeps working.

If you rate the site or a tool, this browser keeps a random ID so the rating counts once. It is created only when you rate and is sent only with your rating — the privacy policy says what is kept.

Things you choose to keep also stay in this browser: settings you ask a tool to remember, saved signatures, and the details you store for filling in forms. The Settings page lists everything this browser holds for the site and removes any of it.

No third-party trackers

There is no advertising pixel and nothing that follows you to other sites.

To count visits we use Cloudflare Web Analytics. It sets no cookie and stores nothing on your device. For each page view it records the page, the site you came from, your browser type, your country and how fast the page loaded — without identifying you, and without following you anywhere else. It is how we learn which pages people actually use.

We also count a few steps anonymously — for example how many times a tool was started or the pricing page was opened. These are plain daily totals with no cookie and no identifier, and nothing is counted when your browser sends Global Privacy Control.

The sign-in form loads one third-party widget: Cloudflare Turnstile, which stops automated sign-up attempts. It sets no cookie here and stores nothing. It appears only on the sign-in page, and only if you go there.

You can open a file straight from Dropbox, Google Drive or OneDrive. When you do, your browser fetches that one file from the provider directly — it is never routed through our servers, and nothing else is requested. Google Drive asks you to sign in first, and we request only the narrowest permission it offers: access to the file you picked, and nothing else in your Drive.

This is enforced, not just promised: the site content security policy lists every outside address the page is allowed to reach, and that list is short enough to print here — Cloudflare Turnstile on the sign-in page, Cloudflare Web Analytics for the anonymous visit count, and Dropbox, Google Drive or OneDrive when you pick a file from one of them. A tracker could not phone home even if one were added by mistake, because its address would not be on the list.