Skip to content

Privacy

What the ETA Signer app and this website collect, and why.

This website

  • This website sets no cookies and has no ads. It keeps nothing on your device beyond the current browser tab.
  • We measure how the site is used with PostHog, on its EU servers, in cookieless mode: pages viewed, clicks, how far you scroll, and recordings of visits in which everything you type is hidden. Visitors are counted with a code that changes every day, so nobody can follow you from one day to the next or across other sites.
  • Cloudflare Web Analytics also counts visits and page speed, without cookies.
  • When you fill in the download form, we also save how you arrived (the link’s campaign tags, the site that sent you and the first page you saw) and any optional answers you give.
  • We match the tax registration number from the form with the app’s free-signature count, to see whether people who download can actually use the app, and to offer help if not.
  • We keep form submissions until you ask us to delete them, or for 3 years after your last activity.
  • Like any website, the server sees your internet address when you visit.

The app and the download form

From the licence agreement (section 5):

5. How the Software handles your keys and data

  1. Your private key stays on your hardware token. The Software asks the token to create a signature; it never reads, copies or exports the key.
  2. Your token PIN is entered into the macOS system dialog or, for PKCS#11 tokens, passed directly to the token. The Software does not store or transmit it.
  3. Signing happens on your Mac. The Software accepts signing requests only from https://invoicing.eta.gov.eg and only on your own computer. It never sends your documents, your PIN or your private key anywhere, and it does not collect analytics or telemetry.
  4. What the Software sends to our server, and why:
    • Free signatures: the signatures you make, so we can count them. A signature contains your signing certificate (including the name and tax registration number in it) and a fingerprint (hash) of the document, not the document itself.
    • Licence renewal: every few weeks while you sign, your licence and one extra signature made by your token, so we can confirm the licence is still valid (§ 10).
    • Update checks: once a day, the Software asks which version is current. This reveals your internet address, as any internet request does.
  5. Download page: to download the Software you give us your name, email address, company and tax registration number; we also record your country. We use these details to support your licence and to send you information about ETA Signer. We do not sell or share them.
  6. Our server runs on Cloudflare, Inc. infrastructure, which may store data outside Egypt. To ask what we hold about you, or to have it deleted, email etasigner@youssefmaged.com. Deleting the record of your free signatures does not grant new free signatures.

Your data

To ask what we hold about you, or to have it deleted, email etasigner@youssefmaged.com

Full licence agreement