Privacy policy

Summary

• We collect very little. If you send an access request, we keep what you put in the form so we can reply.
• The signature generator, cost calculator and legal checker run in your browser. What you draw, type or choose is not sent to our servers.
• We turn on Google Analytics cookies only if you click Accept. You can change your choice below at any time.
• We do not sell personal information, and we do not use advertising pixels.
• To see, correct or delete your data, email hello@nodshake.com.

Who we are

nodshake (nodshake.com) is an electronic signature service for freelancers, consultants, realtors and small agencies. We are taking access requests and setting people up one at a time. nodshake is operated by CodesSavvy (codessavvy.com). "We" and "us" mean CodesSavvy and the team that runs nodshake, and CodesSavvy is the controller of the personal data described in this policy.

This policy covers this website and its free tools. It also covers the access request forms for individuals and for companies.

What we collect and why

Access request form

When you send a request we collect:

• Your email address (required), so we can reply.
• Your role (required), so we know who we are talking to.
• Your name, how many documents you send a month, and a note about what you sign (all optional).
• For company requests: your company name and role (required), and optionally your website, the countries your customers are in, what you need, which vendor you use today, your timeline and requirements, and a note.

We use these only to answer your request, set up access, or scope and quote work you ask us to do. If you are in the UK or EU, our legal basis is taking steps at your request before an agreement, and our legitimate interest in replying to people who write to us.

Free tools

The signature generator makes your signature inside your browser and saves the PNG to your device. The cost calculator and the legal checker run in your browser too. None of what you draw, type or select is sent to us. If you accepted analytics, we record only that a tool was used.

Analytics

We use Google Analytics 4 with Google Consent Mode v2. Analytics storage is off by default for everyone and turns on only if you click Accept. Before you choose, or if you decline, Google may receive basic pings that do not use cookies or identifiers. Advertising signals are always off.

If you accept, we record page views and these events: clicks on our Get started, Request access, For business and Talk to us buttons, starting and sending the access form, whether sending failed (only the reason, such as a network error), using a tool, and downloading a signature (only whether it was drawn or typed). We never send names, email addresses, form answers or anything you type to analytics.

Server logs and spam protection

Our hosting provider, Vercel, keeps short-term server logs, including your IP address and browser details, for security and to prevent abuse. When you send the access form, its full contents (every field you filled in) are also written to those logs as a backup in case delivery to us fails, and stay there for as long as Vercel keeps runtime logs. We also limit how often the form can be sent from one address, and use a hidden field to catch bots.

Cookies and browser storage

• nodshake-consent: stored in your browser, remembers whether you accepted or declined analytics. It never leaves your device.
• _ga and _ga_<id>: Google Analytics cookies, set only after you click Accept, so we can tell visits apart and count visitors.
• No advertising cookies.

Who receives your data

• Formspree, which receives access requests from our form, keeps a copy of each submission in its account, and passes them to us. The same Formspree account is used for other sites run by CodesSavvy.
• Slack, where the people who run nodshake are notified of new requests. Access is limited to them.
• Google, for analytics, and only if you accept analytics cookies.
• Vercel, our hosting provider, which serves the website and keeps the server logs described above.

Our providers may process data outside your country, including in the United States.

How long we keep it

• Access requests: as long as we need to deal with your request. You can ask us to delete yours at any time.
• Analytics data: 14 months, the retention setting in Google Analytics.
• Server logs, including the backup copy of form contents: short-term, according to Vercel's log retention settings.

Your rights

Depending on where you live, you can ask to see the data we hold about you, correct it, delete it, object to how we use it, or withdraw consent you gave us. Email hello@nodshake.com and we will reply. If you are in the UK or EU, you can also complain to a data protection authority: the Information Commissioner's Office (ICO) in the UK, or your local authority in the EU.

Security

We protect your information with reasonable measures: encrypted connections, limits on how often forms can be sent, and collecting as little as we can. Please do not put sensitive details in the form.

Changes

If what we collect or who receives it changes, we update this policy and the date at the top.

Contact

Questions or requests about your privacy? Email the nodshake team at hello@nodshake.com.