What we keep, and who sees it.

The short version

• We keep what it takes to make a card work. Nothing to follow you around.
• No ads, no analytics, no tracking cookies. We don't sell anything about you.
• Anyone with the signing link can read the names and notes on a card.
• Photos, voice messages and GIFs are only for the person the card is for.
• To keep cards kind, signatures, photos, GIFs, names and notes are checked for harmful content, partly with help from OpenAI.
• Payments go through Stripe. We never see your card number.
• Want something deleted? Email hello@signaround.com.

Who we are

signaround is a service of Outstand Brand, LLC. When this page says "we", that's who it means. Questions about any of this go to hello@signaround.com.

What's on a card

When you start a card, you give us:

• Who it's for: their name, the occasion, the design and color.
• The words on it: the greeting, your note, who it's from, and a date if you add one.
• Your name, if you add it, and your email.

We use your email to send you the card's links and your receipt, and to help you find your card again. Those emails are sent through Cloudflare Email Service.

What signers leave

Everyone who signs leaves their name, their signature and, if they like, a short note. A signature is stored as the lines you drew, not as a picture of your screen. We also keep which pen and color you picked.

Anyone with the signing link can open the card and read every name, signature and note on it. Write notes you'd be happy for the whole group to see.

Photos, voice messages and GIFs you upload are different. They're stored in Cloudflare R2 and only open through the recipient's private link. Other signers don't see them, and neither do you once you've added them. The organizer holds the recipient's link until they send it, so they can see them too.

When you search for a GIF, the words you type go to GIPHY so it can find matches. GIPHY's privacy policy covers what it does with them. If you don't search, nothing goes to GIPHY.

When the person a card is for opens it, we let the person who sent the card know it's been opened.

Keeping cards kind

Before something goes on a card, we check it:

• Links, slurs and hate. Names and notes can't hold web addresses, email addresses, slurs or hate speech. We check this on our own servers, and nothing is sent anywhere.
• Swearing. If the organizer turns on "Keep it clean", we look for swearing in names and notes, also on our own servers. Anything already on the card is starred out.
• Photos and GIFs. Every photo or GIF you upload is sent to OpenAI's moderation service, which tells us whether it's explicit, violent, gory or about self-harm. If it is, we turn it away and don't keep it. For a GIF, we send a few of its frames.
• Your signature. We draw the lines you signed with as a black-and-white picture and send it to the same service, for the same check.
• Hate symbols. Your signature, and every photo you upload, is also looked at by an AI model run by Cloudflare (Workers AI), which hosts the site already. It answers yes or no to whether the picture shows a hate symbol, hateful writing, or (on a card set to keep it clean) swearing. We keep only the answer, not the picture. Cloudflare's privacy policy covers what it handles. On a very busy day the check may be skipped for the rest of the day.
• Names and notes. Your name and note go to the same service, which tells us whether they threaten anyone, carry hate, or sexualize a child (and, on a card set to keep it clean, whether they're sexual or harassing). If so, we ask you to change them.

OpenAI only answers yes or no for each kind of harm. It doesn't use what we send to train its models. It may keep it for up to 30 days to watch for abuse of its service, and then deletes it. OpenAI's privacy policy covers the rest. GIFs you pick from GIPHY aren't sent: GIPHY rates those itself, and we only show ones rated PG or milder. Voice messages aren't checked.

If OpenAI can't be reached, we ask you to try a photo or GIF again in a moment, and your signature, name and note go on with only the checks on our own servers. If we turn something away, we keep a note that it was refused on that card and why, but not the thing itself.

So that the same picture is never checked twice, we keep a fingerprint of each signature, photo and GIF we've checked (a scrambled code made from it, a SHA-256 hash, which can't be turned back into the picture) and what the check said, for 30 days.

Accounts

You don't need one. If you'd like one, you sign in with a link we email you. You can also set a password. We only store a scrambled version of it (a hash), never the password itself.

Signing in sets one cookie, which keeps you signed in. That's all it's for.

Requesting a card design

The request form asks for your idea and your email, so we can tell you if we make it. We may draft designs with help from AI tools, which see the idea you wrote. A person reviews every request. We can't promise to make every one.

Paying

Checkout happens on Stripe's page. Stripe handles your card details, and we never see or store them. We pass your email to Stripe so your receipt reaches you. Stripe's privacy policy covers what it keeps.

We keep a record of each order: the amount, what was bought, and Stripe's reference for the payment. If an order is refunded or disputed, Stripe tells us and we note it on the order.

Writing to us

If you write to support@signaround.com or hello@signaround.com, we keep your message and our reply so we can help you and remember what we did. If we do something to make a card right for you, we note that against your email address too. We don't use any of it for anything else.

Keeping out spam

On the waitlist, the sign-in forms and the card request form, we use Cloudflare Turnstile to tell people from bots, so nobody can make us email or text an address that isn't theirs. Most people never see it; now and then it asks for a tick. It looks at your browser and your connection to decide, and it doesn't use advertising cookies. Cloudflare's Turnstile privacy addendum says what it handles.

To stop one person filling a card, we limit how often the same device can claim spots and sign. To tell devices apart, we mix your IP address and browser details with the day's date and scramble the result (a SHA-256 hash). The scrambled code changes every day. We store that code next to a signature, and never your IP address.

Your browser

We don't use tracking cookies. Your browser keeps a few small things on your own device, in its local storage:

• the cards you started on it, so you can get back to them
• any secret cards you found on the home page
• the spot you're signing, while you sign it
• whether you've opened a card's envelope, and whether you muted its sound

These stay on your device. Clearing this site's data in your browser removes them.

Analytics and other scripts

We use PostHog to see how the site is used: which pages people visit and which buttons they press, so we can tell what works and fix what doesn't. It doesn't record your screen, and before anything is sent we take out the private parts of card links, so it never sees the key that opens a card or the one that manages it. There are no ads or advertising trackers, and our fonts come from our own server. The forms described above also load Cloudflare's Turnstile check. The site runs on Cloudflare, which handles every request, as any host does, and keeps short-lived technical logs to run and protect the service. We keep logs too, so we can fix things when they break.

How long we keep things

• A card nobody pays for is deleted after 14 days.
• A photo or voice message that never makes it onto a signature is deleted after an hour. A photo or GIF our check turns away is never kept.
• A hold on a spot runs out after 25 minutes.
• Paid cards stay, with everything signed on them, so their links keep working. They aren't deleted on a timer.
• A signature the organizer hides stays stored, so they can bring it back.

If you'd like a card or a signature deleted for good, email us with the card's link and we'll do it.

Who else sees your data

Only the services that run signaround, for the job each one does:

• Cloudflare hosts the site, the database, the uploads and our email, runs Turnstile on the waitlist, sign-in and request forms, and looks at signatures and photos for hate symbols.
• Stripe takes payments.
• GIPHY gets GIF search words, when you search.
• OpenAI checks signatures, uploaded photos and GIFs, and signers' names and notes, for harmful content.
• AI tools see the ideas sent through the request form.

We don't sell or rent your data to anyone.

Your say

You can ask us for a copy of what we hold about you, to fix it, or to delete it. Email hello@signaround.com. If you signed a card and want your signature off it, the organizer can hide it straight away, or we can remove it.

If this page changes

We'll change the date at the top.