Cookie Policy

Last updated: October 28, 2026

What are cookies?

Cookies are small text files stored on your device when you visit a website. They help the site remember your preferences, keep you signed in, and understand how the service is used. This policy also covers similar technologies, such as your browser's local storage.

Essential cookies (always on)

Signatura uses strictly necessary cookies and browser storage to run the platform: signing you in, keeping your session, security, and remembering preferences such as your language and accessibility settings. They also remember your cookie choice. These do not need your consent and are not used for analytics or advertising. We do not sell your personal data.

Visit analytics (only if you accept)

We count visits to Signatura with our own first-party analytics. Without your consent we count them cookieless: nothing is stored on your device, and our servers derive a daily visitor code from a random value that is deleted at the end of each day (UTC) together with your IP address and browser details. Your IP address and browser details are not stored, and this code cannot be used to recognise you on another day or be linked to your account. Our encrypted database backups may still hold a deleted daily value for up to 90 days; they are used only to restore the service after a failure. If you accept, we additionally store a random visitor ID (local storage) and a random visit ID (session storage) so we can recognise return visits. What we store on your device (only if you accept): a random visitor ID (in your browser's local storage) and a random visit ID that is cleared when you close the tab (in session storage). What we record for each page view: the page address with any IDs removed, the site that referred you (domain only), the time, and whether you are signed in. From your connection, our servers work out your country, device type (desktop, mobile or tablet) and operating system. Your IP address and full browser details are not stored. Pseudonymous visitor key: we do not store your account ID or visitor ID as such. We store a one-way code (HMAC) derived from it with a secret key held on our servers, which cannot be linked back to you without that key. How long we keep it: page-view records for 30 days; the daily list of visitor keys (used to count unique visitors) for 25 months; totals with no identifiers (for example, visits per day) indefinitely. We use this only to understand and improve Signatura. It is not shared with advertisers and it is not sold. Deleting your account also deletes the analytics records linked to it. Cookieless records are never linked to an account. Separately, we count sign-ins by method (for example, password or Google) as plain daily totals. These contain no identifier and store nothing on your device.

Session recordings and heatmaps: Microsoft Clarity and Sentry (only if you accept)

If you accept, we also use Microsoft Clarity to see how pages are used, through session recordings and heatmaps (clicks, scrolling, mouse movement and page layout). This helps us find confusing screens and bugs. - Nothing is loaded before you accept, or at all if you decline. - Page text and anything you type are masked in your browser before anything is sent. Your CV, contracts, interview answers and salary figures are additionally marked as always hidden. - Clarity is never loaded in Sage. - If you are signed in, we pass Clarity your internal account ID, which Clarity turns into a one-way code in your browser. We never pass it your name or email address. - Once you accept, Clarity sets its own cookies (_clck and _clsk). Clarity is provided by Microsoft Corporation, which processes this data on our behalf, on servers that may be outside your country. Microsoft keeps recordings for a limited period under Clarity's retention rules. See the Microsoft Privacy Statement: https://privacy.microsoft.com/privacystatement Sentry Session Replay. If you accept, we also turn on Sentry Session Replay, which records what happens on the page so we can reproduce and fix bugs. - The recording stays in your browser and covers only the last minute. Only when an error occurs are that minute and the rest of the visit sent to Sentry. In addition, about 1 in 10 visits is recorded in full. - All page text and anything you type are masked, and images and media are blocked, in your browser before anything is sent. - Sentry Session Replay never runs in Sage. - It sets no cookies; it keeps a session ID in your browser's session storage. Sentry is provided by Functional Software, Inc., which processes this data on our behalf and stores it in its EU region. See the Sentry Privacy Policy: https://sentry.io/privacy/

Your choice, and how to change it

Accept allows return-visit analytics, Clarity and Sentry Session Replay. Decline allows none of them; visits are still counted cookieless. Essential cookies work either way, and declining does not limit any feature. Sentry's plain error reports (no recording) are not based on consent and are sent either way; see the Privacy Policy. You can change your choice at any time with the control on this page. Turning analytics off stops all three from that moment, removes our visitor and visit IDs from your browser, and tells Clarity to delete its cookies. If Sentry was recording that visit in full, the last few seconds recorded before you turned it off (with your consent) may still be sent. Data already collected is kept only for the periods above. To have data linked to your account erased sooner, delete your account or email hello@signatura.ai. If we change what Accept covers, we will ask you again.

Not chosen yet: analytics and recordings stay off unless you accept.

Managing cookies in your browser

You can also control and delete cookies through your browser settings. Disabling strictly necessary cookies may prevent you from signing in or using core features of Signatura.