Built in from the start, not bolted on.
SignNexa touches your email, your domain, and your public presence - so we treat security and privacy as features, not fine print. Here is exactly how we protect your account and respect everyone who interacts with you.
Managing your own account? See the account & security guide.
Last updated: 20 July 2026
Privacy-first by default
You get the numbers you need without us building profiles of the people who visit you.
Yours to control
Your data is yours. Export it, delete it, or ask us anything about how it is handled.
Secure by design
Modern authentication, hardened scanning, and rate limiting are part of how the product works - not add-ons.
Keeping your account safe.
The fundamentals, done properly - so it is hard for anyone but you to get in.
Two-factor authentication
Turn on TOTP 2FA with any authenticator app. Your secret is encrypted at rest, never stored in the clear.
Modern password hashing
Passwords are hashed with Argon2id - today's best practice - and are never written to our logs.
Session visibility
Review your account's recent sessions and manage your security settings from one place.
Rate limiting everywhere
Every endpoint is rate-limited to blunt brute-force attempts and automated abuse.
Respecting everyone's privacy.
Your analytics should not come at the cost of the people who read your emails or open your page.
Analytics without tracking people
We count views and clicks so you can see what works - but we do not build profiles of individual visitors.
No third-party trackers
Your signature and page links route through our own infrastructure, not third-party ad or tracking networks.
Ephemeral test data
The Inbox Tester keeps a test message for 30 minutes in memory and never stores the raw email body.
Free tools, no account
Run SSL, DNS, and deliverability checks without signing up or handing over personal data.
Secure by design.
The parts you never see are hardened too.
SSRF-safe scanning
Our monitoring engine runs inside an SSRF envelope, so a scan can never be turned against internal systems.
Fronted by Cloudflare
Traffic is served behind Cloudflare for TLS everywhere, DDoS protection, and a hardened edge.
Encrypted secrets, redacted logs
Sensitive values like 2FA secrets are encrypted, and secrets are stripped before anything is logged.
Least data by default
We collect what the product needs to work - and nothing more.
It is your data. You decide.
Read exactly what we collect and why, or ask us to delete your data entirely. SignNexa is an early-stage product operated by Royal Freelancing, so if you have a specific security or privacy requirement, we would rather you just ask.