No server of ours

Parafa has no analytics, no crash reporting and no server of ours. Nothing you sign passes through us.

Your documents

Parafa keeps your documents in iCloud Drive ▸ Parafa, in your own iCloud account, or on the device only if you choose so. A library kept in Dropbox or OneDrive from before stays there until you move it.

Your certificate

On a Mac, Parafa uses the certificate where it already is, in the macOS keychain. On an iPhone or iPad the certificate and its private key are imported into the device's keychain and stay there. Parafa asks for Touch ID, Face ID or your password before the key signs anything.

Services Parafa talks to

Only the ones the task in front of you needs, and only at that moment:

• Apple iCloud — iCloud Drive for the library, and iCloud's key-value store for your settings and signing profiles, including the stamp pictures.
• Your certificate's provider — asked whether the certificate was revoked when you sign with long-term validation, which every profile does. Checking a signature in a document you received uses only what is in the document.
• A timestamp authority — only if a profile adds a timestamp and you entered its address. It receives a fingerprint of the document, not the document.
• Your data box (ISDS) — when you open Received or send a reply. The password stays in the device's keychain.
• Microsoft — only if you sign in to Microsoft. A Word document is placed in OneDrive ▸ Apps ▸ Parafa for a moment so Word's engine can turn it into a PDF; Parafa takes the PDF back and deletes the temporary file.
• Dropbox — only for a library kept there from before.

The Czech trusted list Parafa checks certificates against is part of the app and is updated with it; it is not downloaded.

This website

Static pages on Netlify. No cookies, no trackers, no analytics, no embedded fonts or scripts from anywhere else. The one thing kept in your browser is which language you picked, so the site does not ask again — and it is removed when you clear site data.

Netlify processes server logs, including IP addresses, as part of serving the pages. We do not read them for anything else.

If you write to us

The contact form is handled by Netlify Forms: Netlify stores what you send — your e-mail, the certificate and devices you ticked, and the message — and passes it on to us by e-mail. We use it only to answer you, and delete it from Netlify once it is answered.

Your rights

Under the GDPR you may ask what we hold about you, ask for a copy, ask for corrections and ask for deletion. Write to [email protected].

Changes

If this ever changes materially, the date below changes with it and what changed is said here plainly.

26 October 2026

Back to the front page