Privacy
Draft · September 2026
What this page covers
What Worth Signing collects, what it is used for, and how long it is kept. There are no accounts and no cookies on this site, and nothing stored on your device outlasts the tab you are reading it in.
What is collected, and when
When you ask for signatures to be drawn — before any payment — the name you typed, the brief you answered and any note you wrote are sent to the studio, because the drawing happens there rather than in your browser. They are used to draw and nothing more: no record of them is written until you buy.
When you buy, those same details are stored with your order, along with which marks you chose. Your email address comes from the payment.
Your IP address is seen by the studio's host, as it is by every website, and is used to rate-limit the drawing so that one visitor cannot exhaust it for everyone. The hosts are named below.
What is kept on your device
No cookies, and nothing that outlives your visit. One value is held while the tab is open — a random identifier used to count a visit as one visit rather than as one person per page — and the browser discards it when you close the tab. Nothing is written that could recognise you tomorrow.
Measurement
The studio counts how the site is used, through PostHog. It is configured to hold no cookie and nothing that survives the tab, which is why you were not asked to accept one. Its identifier lives in session storage: it holds while you move between pages so a visit counts once, and the browser throws it away when the tab closes. The studio cannot follow you between visits and does not try.
What it records is deliberate and short: that a page was viewed, that a name was entered (its length, never the name), that a drawing began, how many marks came back, that a direction was chosen, that checkout was opened, and that a kit was delivered.
The studio also replays visits — how a page was scrolled, where it was tapped, where somebody gave up — so it can see what confuses people and fix it. The replay is built to exclude your material: everything you type is masked before it leaves your browser, the headings that speak your name are masked, and the panels that show your marks are blanked — the recording holds an empty box where your signatures would be. Your name, your note and your signature are never sent to it. The replay lives and dies with the identifier above: when the tab closes, nothing can connect a later visit to it.
What it is used for
To draw the commission, render the writing lesson, package the files and email them to you. It is not used for anything else and is not sold or shared, apart from the processors named below.
How long it is kept
90 days from purchase, so you can come back for your files. After that the record and the files are deleted together.
Who else sees it
- Cloudflare serves the site. Every request reaches them before it reaches anything else, so they see your IP address and which pages you asked for.
- Stripe takes the payment as merchant of record. They receive your card details and email address; the studio never sees a card number.
- Google Cloud runs the studio itself, in the United States: the drawing, the rendering of the writing lesson, the archive of your files and the record of your order.
- Resend delivers the email carrying your files.
- PostHog counts how the site is used and holds the visit replays. It receives no name, no note and no signature — see Measurement above.
On the studio's own development server there is one exception, and it is worth being precise about it: preference judgments — the design decisions and a keep-or-reject verdict — can be written to a file so the house model can learn from them. The name is not part of that record, and the endpoint does not exist on the published site.
Contact
Questions about privacy should go to the studio owner. A contact address belongs here and will be added before launch.