Privacy Policy
Last updated October 26, 2026. NestSigns (“NestSigns”, “we”, “us”) is a web app at nestsigns.com that nests sign letters and other parts onto sheets for cutting. This policy says what we collect when you use it and what we do with it.
The short version
- Your design files are never uploaded. The file is opened in your browser.
- To nest, only the outlines of your parts (shapes as numbers, with no file, names, text or colors) go to our nesting server. It sends back the layout and keeps nothing.
- We keep your email address, your account settings and shop data, how many nests you ran, and a short log of each run so we can fix bugs.
- We do not sell or rent your data, and we do not use advertising or tracking cookies in the app.
What we collect
- Account: your email address, the date you signed up, your plan, how many free nests are left, the language you use, and the country you signed up from.
- Sign-in: a session cookie for each computer you sign in on, the time, IP address and country of each sign-in, and failed sign-in attempts. We use these to keep your account safe and to spot abuse.
- Device check: a one-way code made from basic browser and screen settings, so one computer gets one free trial. It cannot be turned back into those settings and is not used to follow you on other websites.
- Shop data you enter in the app: material inventory and leftovers, sheet prices, material calculations, machine statistics, shop name and logo, and router bit size. These are stored with your account so every computer you sign in on sees the same data.
- Run log: for each nest: the file name, file type, sheet size, spacing and other settings, number of parts and sheets, time taken, and any error message. No artwork or part shapes are kept.
- Job archive: recent jobs you can re-cut are saved only in your own browser on that computer. We never receive them.
- Payments (when paid plans start): handled by Stripe. We receive your plan status and the last four digits and expiry of your card, never the full card number.
- Email to support: if you write to [email protected], we keep the message so we can answer it.
Why we use it
- To run the service: sign you in, nest your parts, keep your shop data in sync, and count free nests and daily limits.
- To keep it safe: stop bots, shared or stolen accounts, and attempts to copy the nesting engine.
- To fix bugs and make nesting better, using the run log.
- To email you about your account: sign-in codes, billing, and important changes. We will only send marketing email if you agree to it, and every such email has an unsubscribe link.
Who processes it for us
- Cloudflare: hosting, database, sign-in codes by email, and the bot check (Turnstile).
- Google Cloud: the nesting server, which receives part outlines only for the few seconds a nest takes.
- Stripe: payments, once paid plans start.
They process data only to provide their service to us. We may also share data if the law requires it, or to protect NestSigns and its users from fraud or abuse. If NestSigns is sold or merged, your data would move to the new owner under this policy.
How long we keep it
- Account and shop data: while your account is open, and deleted within 30 days after you ask us to close it.
- Sign-in sessions: 30 days, or until you sign out or sign in on more than three computers.
- Run logs and security events: up to 12 months.
- Database backups roll over automatically within 30 days.
Your choices and rights
You can ask us for a copy of your data, to correct it, or to delete your account and its data, by emailing [email protected] from the account’s email address. We answer within 30 days. You can export your inventory to Excel in the app at any time. Residents of California and other US states with privacy laws, and of the EU and UK, have these rights by law. We do not sell or share personal information for cross-context advertising.
Cookies and browser storage
We use one sign-in cookie (needed for the app to work). The app saves your settings and job archive in your browser’s storage. There are no advertising or analytics cookies in the app.
Security
All traffic uses HTTPS. Sign-in codes and sessions are stored only as one-way hashes, requests to the nesting server are signed, and access is limited and logged. No system is perfectly safe, so please tell us at once at [email protected] if you think your account was used by someone else.
Children
NestSigns is a business tool and is not meant for anyone under 16. We do not knowingly collect data from children.
Changes
If we change this policy, we will update the date at the top. For important changes we will tell signed-in users in the app or by email before they take effect.