Privacy

What Shipping Label Generator stores when you make a label, how long it keeps it, and how to reach us about it.

A single label

A single label is rendered in the request that asked for it and streamed straight back to your browser or your API client. Nothing about it is written down: no label, no sender or recipient address, no record of who you printed it for. Close the tab and there is nothing left to delete.

A bulk batch

A CSV of orders is different, because the finished file has to outlive the request that uploaded it. The rows are held in a queue while the batch renders, so a long list does not block the upload. The finished file is then stored privately. The only way to read it is the download link for that batch, which carries a signed token that expires with the file, so the link stops working on its own even if it is shared.

An anonymous batch keeps its file for 24 hours, and a batch filed on an account keeps it for 7 days. The deletion job reads the same two constants this page does, so the window here is the window the code enforces, not a target. Deleting a batch takes its file with it.

The usage record

A batch also leaves one usage record: the number of rows submitted, the number of labels rendered, the layout, the output format and the time it was filed. An anonymous batch is known by a salted hash of the IP address the request came from and by nothing else, so the allowance can be counted without the address ever being written down. The record holds no recipient names, no street addresses and no label content.

That record is kept 35 days, long enough to cover the calendar month a monthly allowance is counted on, and then the cleanup job deletes it. It outlives the file on purpose: it is the count a paid plan is metered against, so deleting it with the file would erase the meter and reset the allowance every week.

Requests and rate limits

The endpoints behind the tool count requests in short windows, keyed by the same salted IP hash, so one network cannot use the service as a free load generator. Those counters expire with their window, and no counter is kept after it. The limits themselves are on the pricing page and in the terms.

Your account

An account holds the email address you signed up with, the details needed to sign in, and the plan you are on. If you save sender addresses, they are stored with the account so a repeat sender is typed once. The account email and the saved senders stay until you delete them. Cards are handled by Stripe, and no card number reaches us.

You can delete your account yourself: Dashboard, then Delete account, then type DELETE. Any subscription is cancelled at once and does not renew. Then the account, its saved senders, its API keys, its batches with their files and usage records, and its usage history are deleted together, and batches still waiting to render are taken off the queue. We keep one line saying an account was deleted, with its internal id and its Stripe customer id and no email address. Our staff log of earlier support actions on the account is kept, with your email address removed from it. Stripe keeps its own record of past payments.

Contact

Questions, data requests and deletion requests: [email protected].