Cookie Policy

1. What cookies are

Cookies are small files a website stores in your browser, and similar technologies such as local storage. signatoro.com uses three kinds: essential ones that make the Signatoro service work, analytics ones that help us understand how the site is used, and advertising ones that tell us which of our ads bring people to Signatoro. Analytics and advertising are separate choices in the cookie banner, and you can change either at any time.

2. Essential cookies and storage (always on)

• Authentication: session tokens set by our authentication provider (Supabase) so you stay signed in. Cleared when you sign out or the session expires.
• Security: short-lived tokens that protect forms and sign-in flows against forgery.
• Preferences: your theme, language and your answers to the cookie banner (stored in local storage so we do not ask again).
• Region (sig_geo; 1 day): your country, and region where it matters (for example Quebec), taken from your IP address by our hosting provider. It decides whether advertising cookies start on or off before you answer the banner (section 4).
• Support chat: the chat button is provided by PostHog (hosted in the EU). When a page loads it creates an ID for your browser in local storage (ph_conv_*), and keeps the conversation you have open and, if you give them, your name and email there too, so the chat button can find your conversations on the next page. It stays until you sign out or clear your browser storage.

3. Analytics cookies (only with your consent)

• Google Analytics 4 (_ga, _ga_*; up to 2 years): counts visits and page views and tells us which pages and sources bring people to the site. IP addresses are truncated by Google before storage.
• Microsoft Clarity (_clck, _clsk, CLID, MUID; up to 1 year): records anonymized session replays and heatmaps so we can see where the interface confuses people. Clarity masks text you type by default.

Neither loads until you turn analytics on in the banner. If you leave it off, the site works exactly the same and no analytics cookies are set.

We also use PostHog (hosted in the EU) to see how Signatoro is used: pages viewed, actions such as copying or saving a signature, and errors the app runs into. Until you accept analytics, it runs without cookies or local storage (the support chat above is the one exception). After you accept, it stores an anonymous ID (ph_*; up to 1 year) so your visits link together. When you are signed in, these events are linked to your account, together with the campaign details of the link that first brought you to the site, if it had any and advertising cookies are on.

4. Advertising cookies

We advertise Signatoro on Google. The Google Ads tag tells us which ads lead to a sign-up, a new company or a paid plan, so we can spend on the ads that work, and it lets Google show our ads to people who visited our pricing page or started signing up. It sets these cookies:

• Google Ads (_gcl_au, _gcl_aw, _gcl_gb; up to 90 days): remember the ad you clicked so a later sign-up or purchase can be credited to it. Google also sets its own cookies on its domains (such as doubleclick.net) for measurement and ad audiences.
• First visit (ad_attribution; 90 days): our own cookie with the ad click ID and campaign details of the link that first brought you here. When you create a company or pay, we store these details with your company and with the payment in Stripe, so we can tell which ad a customer came from.

When you buy a plan, the Google Ads tag can also send Google your email address as enhanced-conversion data. The tag scrambles it (a one-way SHA-256 hash) in your browser before it is sent, and Google uses it only to match the purchase to an ad click. This happens only while advertising cookies are on.

Where advertising starts off. In the United Kingdom, the European Economic Area, Switzerland, Quebec and every other region outside the United States, advertising cookies stay off until you turn them on in the banner: the Google Ads tag does not load and no advertising cookie is set.

In the United States, advertising cookies start on and you can turn them off at any time: in the banner, with the Cookie settings button below, or by sending a Global Privacy Control signal from your browser, which we treat as turning them off.

5. Third-party cookies

When you pay, Stripe sets its own cookies on its checkout pages for fraud prevention; they are governed by Stripe's privacy policy. If you sign in with Google, Google sets cookies on its own domains.

6. Changing your choice

• Cookie settings opens the banner with a switch for analytics and one for advertising. Turning advertising off deletes our first-visit cookie and tells the Google tag to stop using advertising cookies; turning analytics off does the same for analytics. Cookie settings is also linked from the footer of our public pages.
• You can also block or delete cookies for any site in your browser settings. Blocking essential cookies will stop you from signing in.
• Google offers a browser add-on that opts you out of Google Analytics everywhere: tools.google.com/dlpage/gaoptout. You can control the ads Google shows you at myadcenter.google.com.

7. Changes to this policy

If we add or remove cookies we will update this page and the date below, and where the change needs new consent, the banner will ask again.

8. Contact

Legal entity: SecOne Inc., a Delaware C Corporation (EIN 39-3563209), incorporated on July 31, 2025. SecOne Inc. owns and operates Signatoro.

Contact: ceo@signatoro.com
Website: signatoro.com
Response time: we aim to answer within two business days.