About

Privacy policy

This website uses Google Analytics to understand how the documentation is read. It has no advertising and no forms, and the packages themselves have no telemetry. This policy explains what Google Analytics and the other services behind these pages see, and where your agreement data goes when you use the SDK.

Controller: Conceptualize
Contact: info@conceptualize.ae
Effective: 4 November 2026

At a glance

The website uses Google Analytics, which sets cookies and gives Conceptualize statistics about how the pages are used: pages viewed, approximate location, device and browser. It is not used for advertising, and you can opt out.
The packages collect nothing. Conceptualize receives no data from your application or from the agreements you send.
The website is hosted on GitHub Pages and loads fonts from Google Fonts; both receive your IP address as part of serving the files.
Your theme choice (light or dark) is stored in your own browser only. Search runs in your browser.
The SDK sends data only to Adobe Acrobat Sign and to endpoints you configure, never to Conceptualize.

Who we are and what this covers

"We" means Conceptualize, which creates and maintains the open-source packages conceptlz/adobe-sign and conceptlz/adobe-sign-laravel and publishes this documentation. This policy covers:

the documentation websites for both packages (this site and its sibling), and
the behaviour of the packages themselves when you install them in your application.

It does not cover Adobe Acrobat Sign, GitHub, Packagist, Google Analytics or Google Fonts, which have their own privacy policies (linked below), or the applications you build with the SDK, for which you are responsible.

This documentation website

Analytics: Google Analytics

Every page loads Google Analytics 4 (Google tag gtag.js, measurement ID G-MEPPZRMKDP), provided by Google. Both documentation sites, for the core SDK and for the Laravel bridge, report to the same Analytics property. We use it only to learn which pages are read and where the documentation needs improving, not for advertising.

When a page loads, Google Analytics collects:

the page you view, the page that referred you, and how you interact with it (time on page, scrolling, links you follow out of the site);
technical details of your device: browser, operating system, screen size and language;
your approximate location (country and city), which Google derives from your IP address. Google states that Google Analytics 4 does not log or store IP addresses.

To recognise repeat visits, it sets first-party cookies on conceptlz.github.io, named _ga and _ga_MEPPZRMKDP. They hold a random identifier, not your name or email, and expire after up to two years. Google processes this data under its own terms and may handle it outside your country; see how Google uses information from sites that use its services. Google keeps user-level data for the retention period set in our Analytics property, at most 14 months; aggregated reports, which identify no one, can be kept longer.

Opting out. Install the Google Analytics opt-out browser add-on, block cookies or scripts from Google in your browser or with a content blocker, or delete the _ga cookies. The documentation works fully without Analytics.

No advertising, accounts or forms

Apart from Google Analytics, the site contains no advertising scripts, no tracking pixels, no social-media widgets and no embedded videos. There are no accounts, sign-ins or contact forms, so the site never asks you for personal data.

Hosting: GitHub Pages

The pages are served by GitHub Pages, a service of GitHub, Inc. Like any web server, GitHub receives technical information when your browser requests a page, including your IP address, the page requested, and your browser's user-agent string. GitHub may log this for security and to operate the service. Conceptualize has no access to these logs. See the GitHub General Privacy Statement.

Fonts: Google Fonts

The typefaces (Gloock, Atkinson Hyperlegible Next and Atkinson Hyperlegible Mono) are loaded from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). To deliver them, Google receives your IP address and browser information. Google states that the Google Fonts web API does not set cookies or use this data to build profiles; see the Google Fonts privacy FAQ. If you block these requests, the site still works and falls back to fonts installed on your device.

Your theme preference

If you switch between light and dark mode, the site remembers your choice in your browser's localStorage under the key docs-theme. It never leaves your device, and it is not a cookie and not used for tracking. Clear it at any time through your browser's site-data settings; the site then follows your system preference again.

Search

The search box looks through an index that is downloaded with the page. Your queries are processed entirely in your browser and are not sent anywhere.

Links to other sites

Pages link to GitHub, Packagist, Adobe, PHP-FIG and other sites. Those sites have their own privacy practices, which apply once you follow a link.

The software packages

No telemetry

Neither package collects usage statistics, crash reports or analytics, and neither contacts any server operated by Conceptualize. Installing them through Composer involves Packagist and GitHub, whose own policies apply to those downloads.

Where your data goes

The SDK is a client for the Acrobat Sign REST API. It sends requests only to:

api.adobesign.com (or the bootstrap URL you configure), to find your account's data centre;
your account's Acrobat Sign data centre (for example api.na4.adobesign.com), for every API call; and
during OAuth, Adobe's authorization and token endpoints.

Those requests can contain personal data you choose to send: documents, agreement names and messages, and the names, email addresses and phone numbers of signers. Adobe processes that data under your agreement with Adobe; see the Adobe Privacy Center. For data you send through the SDK, you (or your organisation) are normally the controller; Conceptualize is not involved and never receives it.

Every request carries a User-Agent header of the form conceptlz-adobe-sign-php/0.4.0, which tells Adobe the SDK name and version and nothing about you. You can change it with ClientOptions::$userAgent.

What the packages store, and where

Everything the packages keep is stored in infrastructure you control:

Data	Where	Package
Your account's API base URIs	Your PSR-16 cache (default 24 hours)	Core
OAuth access and refresh tokens, expiry and data centre	The `TokenStore` you provide (in memory by default)	Core
OAuth tokens, keyed by your user id	The `adobe_sign_tokens` database table, with both tokens encrypted using your `APP_KEY`	Laravel
Webhook notification ids, to ignore duplicates	Your Laravel cache store (72 hours by default)	Laravel
ETags of recently read resources	Memory, for the life of the client object	Core

Logging

If you give the SDK a PSR-3 logger, it logs the method, path, status code and duration of each request, and retries after rate limiting. Paths can include agreement ids. Request bodies, documents, signer details and credentials are not logged. Integration Keys, access tokens and client secrets are also redacted from exception messages. The Laravel webhook route logs the reason and the sender's IP address when it rejects a webhook. Logs go to the logger or log channel you configure, and your own retention rules apply.

Example scripts and live tests

The example scripts and the optional live test suite send real agreements, and therefore real emails, to the addresses you configure. They read your credentials from your environment or a local .env file and never transmit them anywhere except Adobe.

When you contact us

If you email Conceptualize, we use your email address and message to reply and to deal with your request, and keep the correspondence only as long as needed for that. If you open an issue or pull request on GitHub, it is public and handled under GitHub's terms; please do not post credentials, documents or other people's personal data in it.

Your rights

The only website data Conceptualize can see is Google Analytics data. It is pseudonymous: it identifies a browser by a random cookie identifier, not you by name, so we usually cannot tell which data is yours. You can stop it at any time by opting out; if you send us the identifier from your _ga cookie, we can ask Google to delete the data associated with it. The packages send us nothing, so there is nothing to access or delete there. For data held by GitHub, Google or Adobe, contact them directly using the links above. For emails you have sent us, write to info@conceptualize.ae to ask for access or deletion. Depending on where you live, you may also have the right to complain to a data-protection authority.

Children

This documentation is meant for software developers. It is not directed at children and knowingly collects no data from anyone.

Changes to this policy

If the website or the packages change in a way that affects privacy, for example by adding a new third-party service, this page is updated and its effective date changes. The history of this file is public in the package's GitHub repository.

Contact

Conceptualize, info@conceptualize.ae. Read the disclaimer for the project's relationship to Adobe.