Privacy Policy
Last updated: November 3, 2026
Your privacy is important to us. It is Cert Generate's policy to respect your privacy regarding any information we may collect from you across our website.
1. Information We Collect
Certificate templates, spreadsheets, names, custom fonts, logos, signatures, and QR content are processed in your browser by default and are not stored on our servers. If you import a public Google Sheets response URL, your browser retrieves that sheet to process it locally.
Documents opened normally in the Document Signer are processed in the browser. Reusable signatures are not saved. If you sign in and deliberately save a reusable stamp, the cleaned stamp image is stored privately in your account storage until you delete it.
When you deliberately use the “Draw signature on phone” QR pairing feature, the phone encrypts the signature image before transfer. Cert Generate temporarily relays only the encrypted payload. The encryption key remains in the browser link fragment, the transfer can be retrieved only by the paired computer, and the temporary session is deleted after retrieval or expires after approximately 15 minutes.
2. How We Use Your Information
We use the information you provide to generate certificates. If you explicitly choose email delivery, each recipient email address, name, and certificate attachment is sent to our transactional email provider solely to deliver that certificate. Cert Generate does not add those recipients to a mailing list or store the uploaded recipient list in its database.
If you create a signing request, we temporarily store the source document, request metadata, optional signer email, and completed flattened PDF in private account storage. The signer receives an unguessable link that expires after seven days and can submit only once. The requester can download the completed document from the signed-in account. Signature drawings are embedded in the completed document and are not extracted or saved as reusable signature assets.
3. Security
Most generation happens client-side. Optional email delivery necessarily sends the selected recipient and certificate to the delivery provider. Do not use email delivery unless you have permission to contact the recipients. Close or refresh the generator tab to clear its working files.
4. Feedback and aggregate counters
We store feedback you submit, including your displayed name, rating, and message. Feedback remains private while it is moderated and is displayed publicly only after approval. Do not include private information. We also keep an aggregate count of successfully generated certificates; the counter does not store certificate names or files.
5. Accounts, limits, and saved certificates
When you create an account, we store your email, name, organization details, country, optional profile details, password in one-way hashed form, and account settings. Optional marketing messages are sent only when you separately opt in, and you may withdraw that choice in your organization profile. We do not sell account email addresses. Certificate files are saved to your account only when you choose to save them. To enforce the anonymous lifetime generation allowance, we retain a one-way hash derived from the connection address together with a generation count; we do not store the raw address in that counter.
6. Verification and print orders
If you enable certificate verification, we store the certificate holder name, issuer, issue date, and a unique verification code so the public verification link can work. Print ordering is currently unavailable; if you select the interest button, we store the account identifier and timestamp as an aggregate demand signal, but no order or payment is created.
7. Analytics, advertising, and cookies
Advertising and analytics scripts are currently disabled to protect sensitive editing and signing workflows. Essential account session cookies are still used when you sign in.
8. Links to Other Sites
Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and practices of these sites, and cannot accept responsibility or liability for their respective privacy policies.
9. Changes to This Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.