Privacy

Controller: the operator of Sign This, Dammit!. Identity is email (and Google account for senders). No national ID numbers. Documents are encrypted per envelope on disk.

Google AdSense is an independent controller for ad data on the ad surface only. Ad scripts never load on signing, PDF editors, verification, or API routes. Session cookies are HttpOnly.

You can export or delete your account and envelopes from Org settings. Recipients get mail because a sender named their address.

DPIA snapshot

Processing: sending PDF contracts for SES / cryptographic e-signature. Legal basis: contract with the sender and legitimate interest in delivering the request to named recipients. Data: email, name, IP, user-agent, encrypted document bytes, audit events. No special categories, no national ID. Recipients: hosting operator, email transport, Google (AdSense on public/ad surfaces only — not document content). Retention: default 1825 days then deletion. Risks: link forwarding and mailbox compromise; mitigated by short-lived tokens, optional email OTP for cryptographic level, encrypted-at-rest files, no ads on document views. Residual: SES is not QES.