SignToSee / FAQ

Questions and answers

How links work, what your recipient sees, what we record when they open one, and what each plan includes.

How do I know who opened my link?

link-management

Your dashboard lists every link with its status and how many people opened it. Open a link to see who opened it, when, and from roughly where, and, if you limited it to specific people, who is on its list. On every plan, Free included, you also get an email the first time each person opens it.

Can anyone open the link?

link-management

Anyone you send it to can open it after confirming their email address with a one-time code. From the Share plan you can limit a link to specific email addresses; anyone else can then only ask you for access.

Does this work with any URL?

link-management

Yes. You can put a SignToSee link in front of a Notion, Figma, Canva or Google Docs page, or your own website. If that page has its own login or paywall, the recipient still goes through it. Note that this protects less than an uploaded file. Once a recipient is through, they land on the page's own address, and they can bookmark it or send it on without passing through SignToSee. Set that page's own sharing to view-only or to the same people you named on the link.

What happens when my client opens the same link again?

link-management

A person's first open is what goes into the tamper-evident record and what counts towards your monthly limit. When they come back in the same browser within 30 days, the link reopens without a new code and is not counted against your limit again. Each return does show on the link page, as a number of opens and the time of the last one; opens within 30 minutes of each other count once, and these counts are kept for 90 days. For a link to another site, an open means the link let them through again; what they do after the redirect is not visible to us.

Is the link permanent?

link-management

Only if you want it to be. When you create a link you choose how long it stays available (from one hour to no end date), and you can pause, extend or archive it later from the dashboard.

What if I want to change an uploaded document later?

link-management

You cannot replace the file behind an existing link. SignToSee records a fingerprint of the exact file you shared, which is what lets you show later which version someone opened. For a new version, create a new link.

What if my client forwards the link to someone else?

security-best-practices

It depends on what they forward. - The SignToSee link itself: the next person has to confirm their own email address with a one-time code, and accept your terms if the link has them, before anything opens. Their open is recorded under their own address, not your client's. If you limited the link to named people (Share and up), anyone else can only ask you for access. - The address of the page behind it: for a link to Figma, Google Drive, Notion or another site, your client ends up on that page once they are through. If they copy that page's own address and send it on, SignToSee is not in the way; that service's sharing settings decide who can open it. Set those to restricted or to named people. - A downloaded file: downloads are off unless you allow them (files other than PDFs and images can only be downloaded). A downloaded copy is an ordinary file without the watermark, and can be forwarded like any attachment. What SignToSee records is who opened your link, when, and under which terms. It cannot stop someone passing on what they already have.

Does SignToSee prevent downloading, screenshotting, or copying?

security-best-practices

No. SignToSee is an access control layer, not DRM. No software can fully prevent out-of-band capture, such as a camera photo of a monitor. SignToSee documents access and acceptance of access terms.

What extra steps should I take to secure my work?

security-best-practices

A few habits help: - Share a copy made for this client, not your working file or whole workspace. - For a linked Figma, Drive or Notion page, keep its own sharing view-only unless you are working on it together. - For sensitive work, upload the file rather than linking to it, so it opens in SignToSee's viewer with downloads off.

How are large files handled?

security-best-practices

Files are encrypted in your browser and can only be decrypted in your recipient's browser, because we never hold the key. Decryption runs as a stream: the file is processed in chunks as it downloads and written straight to disk, so a large file does not need to fit in memory. In-browser preview is different — it loads the whole file at once before it can render. For very large documents the download will therefore be noticeably faster and more reliable than the preview, so enable 'Allow Download' when you are sending something big.

What exactly is logged on your servers?

access-logs

For each person who opens a link we record: - The time, to the microsecond - Their verified email address (encrypted at rest under a key unique to that person) - Their IP address (encrypted the same way) and the approximate location it indicates - A coarse browser type, not a device fingerprint - A hash of the exact agreement or notice they were shown - For an uploaded file, its fingerprint and size Each record is hash-linked to the previous one, so a later edit becomes visible. The shared file or link itself is encrypted in your browser and we cannot read it.

How long do you keep my access records?

access-logs

Access records are kept for 10 years after the last time that person opened one of your links. Cancelling your plan does not remove them, and neither does archiving or deleting a link. When the 10 years are up, or when you delete your account, the person's email, IP address and the details they typed are erased for good. What remains is the time, the approximate country, the browser type and the fingerprints of the file and the terms: still verifiable, no longer tied to a person. A person's identity can also be erased earlier on request. While a legal hold for a specific dispute covers a record, nothing in it is erased and the account cannot be deleted. Download your records before you delete your account; on a plan without downloads, ask us and we send them.

Is this service annoying for my clients?

access-logs

No. By default the recipient confirms their email with a one-time code and the document opens; they only accept terms if you added an agreement to the link, which the Sign and Sign+ plans offer. It should feel like a short check, not a burden.

Should I let my lawyer review your terms templates first?

legal-regulatory

Yes, if you rely on an agreement (included from the Sign plan). SignToSee provides a standard template with a few settings, the option to use your own text, and a tamper-evident record of who accepted it and when. SignToSee does not provide legal advice.

Do you use marketing cookies or trackers on the pages my clients see?

legal-regulatory

No. There are no ad pixels or marketing analytics on the pages your recipients see. After someone confirms their email we set one necessary cookie for that link, so the same browser can reopen it for up to 30 days without a new code. It contains no email address.

How do you handle abuse of the software?

legal-regulatory

Using SignToSee to share malware, phishing or illegal content breaks our Terms. We can suspend an account immediately when that happens, and close it if the problem is not fixed (Terms, Section 7.3). To report abuse, email support@signtosee.eu with the link.

What are the exact subscription limits?

account-subscription

- Free: 1 active link, 3 new links per month, 20 verified opens per month, 10 MB file storage, an email when someone opens your link. Recipients see a confidentiality notice; agreements are not included. - Share: up to 5 active links, 20 new links per month, unlimited verified opens, 1GB file storage, your own branding, reminders and the other email notifications, links limited to named emails - Share+: everything in Share, up to 15 active links, 50 new links per month, unlimited verified opens, 10GB file storage - Sign: everything in Share+, agreements on uploaded files (your own NDA templates, a signed PDF for both parties), downloading the access log, up to 25 active links, 100 new links per month, unlimited verified opens, 15GB file storage - Sign+: everything in Sign, links on your own domain, branding per project, up to 50 active links, 250 new links per month, unlimited verified opens, 30GB file storage A verified open is counted the first time a person opens a link, whether or not the link has an agreement.

How does the storage limit work?

account-subscription

Each plan has a total storage cap: 10 MB on Free, 1GB on Share, 10GB on Share+, 15GB on Sign and 30GB on Sign+. An upload is refused if it would take you past your cap, and you can delete files you no longer need to make room.

Can I cancel anytime?

account-subscription

Yes. You can cancel at any time. Premium features remain available through the current billing period, then the account downgrades to Free. Links with an agreement, and links beyond the Free plan's one active link, are then switched off, not deleted. Unused-time prorated refunds are not provided.

What happens if your servers crash?

account-subscription

SignToSee runs on Scaleway in the EU. We don't guarantee a level of uptime: while the service is down, your links can't be opened. Access records are kept in the database and also copied to separate write-once storage, so an outage does not rewrite them.

Can I write my own custom access terms text?

access-workflow

Yes, on the Sign and Sign+ plans, which include agreements. In your NDA template, turn on 'Use Custom NDA' and paste your own text. Or use our standard template and fill in the penalty amount, duration and governing law. Have a lawyer check custom terms before you rely on them. We can't tell you whether they hold up where you or your client are.

What can I include in the 'Personal Additions' section?

access-workflow

Anything you want to add to the standard template. It's optional. The most common addition is a penalty clause (liquidated damages): a fixed amount owed if your confidential information is misused. We don't advise on what to include, and whether a clause or amount is enforceable depends on the governing law you choose.

Will click-to-accept hold up across EU countries?

access-workflow

eIDAS Art. 25(1) says an electronic signature cannot be refused as evidence solely because it is electronic. It does not say how much weight a court gives it. SignToSee records who accepted, with which verified email, when, and the exact terms they saw. It cannot promise how a court will weigh that.

How does SignToSee link access terms to the specific person?

access-workflow

Each record holds the verified email, the time and a SHA-256 hash of the exact terms shown, chained to the record before it. Changing any of those afterwards breaks the chain.

What happens if I update a template later?

access-workflow

Nothing changes for links you already created. A link keeps a copy of the terms as they were when you made it, and each acceptance records a hash of that text. Your edit applies to new links only.

Still have questions?

Email us, or share a free link and see what your client sees.