Privacy policy
In short: without an account, your files never leave your device. No ads, no tracking cookies, no data sold.
Data controller
Léonard Guido, sole trader, 4 rue Ernest Renan, 12700 Capdenac-Gare, France. Contact: contact@rature.app.
Using Rature without an account
The PDFs you open are processed in your browser and are not sent anywhere. Your settings, signatures, stamps and the autosave of your work are stored in your browser, on your device only. You can erase them at any time (“Reset my preferences”, or by clearing the site data in your browser).
Visit statistics
We measure traffic without cookies and without identifying you: page views, country, browser type and tools used, counted in aggregate. This is only used to improve Rature (legitimate interest).
Scanning with your phone
The photo goes straight from the phone to the computer, encrypted. A matchmaking service (PeerJS) only receives the technical identifiers and IP addresses needed to connect the two devices. When the network blocks the direct link, it goes through a Cloudflare relay, which cannot read its encrypted content.
Rature Sync (paid account)
We process your email address (sign-in), your subscription status sent by Lemon Squeezy (customer ID, dates, status, never your card number) and your synced data. That data (documents, signatures, stamps, settings) is end-to-end encrypted in your browser before it is sent: neither we nor the host can read it. Legal basis: performance of the contract. Hosting: Supabase, servers in Paris. Retention: as long as your account exists; after your subscription ends, your encrypted data is kept for 30 days (so you can come back) and then deleted. You can delete everything immediately from your account or by writing to contact@rature.app.
Providers and transfers
Website hosting (Vercel, USA), phone relay (Cloudflare, USA), payment (Lemon Squeezy, USA), accounts (Supabase, servers in the European Union). Transfers outside the European Union are covered by the safeguards provided by the GDPR (EU–US Data Privacy Framework or standard contractual clauses).
Cookies
No advertising or analytics cookies. With Rature Sync, a sign-in token is kept in your browser: it is strictly necessary for the service.
Your rights
You can access, correct, delete or export your data, object to or restrict its processing, by writing to contact@rature.app. You can also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).
Last updated 28 October 2026