Privacy Policy
What EZPL collects, why it collects it, who else sees it, and what you can ask us to do with it.
- Effective
- 26 August 2026
- Last updated
- 26 August 2026
Not yet finalised. Details marked in square brackets below still need to be filled in, and this document should be reviewed by someone qualified in your jurisdiction before EZPL is offered publicly. Edit src/lib/landing/legal.ts and this notice disappears on its own.
1Who we are
EZPL is an online toolkit for creating, editing, previewing and generating ZPL label code, operated by [YOUR LEGAL ENTITY NAME] at [YOUR BUSINESS ADDRESS].
This policy explains what we collect when you use ezpl.online, why we collect it, who else sees it, and what you can ask us to do with it. It covers the website and the application behind it.
EZPL is an independent third-party tool. It is not affiliated with, endorsed by or sponsored by Zebra Technologies Corporation.
2What we collect
Your account
You sign in with Google, and that is the only way to create an account. Google tells us three things: your name, your email address, and the web address of your profile picture. We also store the stable identifier Google uses for your account, so your labels stay yours even if you change your email address later.
We never receive your Google password, and we cannot see anything else in your Google account.
Your labels and data
Everything you save label designs, the ZPL behind them, folder names, print settings and the data grids you use for batch printing is stored against your account so it is there when you return.
A data grid can contain whatever you put in it, including names and addresses of your own customers. We treat that as yours: see your own customers’ data below.
Assistant conversations
When you use the AI assistant, the request you type and the ZPL of the label you have open are sent to our AI provider so it can answer, and the exchange is stored against your account so the conversation is still there when you come back.
Technical records
Each sign-in creates a session record holding a hashed token, when it expires, and the browser identification string your browser sends. API keys are stored as a hash, along with the name you gave them and when they were last used never the key itself, which is shown once at creation and cannot be recovered afterwards.
Messages you send us
The contact form takes your name, email address and message, and emails them to us so we can reply. Those messages are not added to your account record.
There is no analytics, no advertising technology and no third-party tracking on this site. We do not build a profile of you, we do not track you across other websites, and we do not sell or share your information with anyone for advertising.
3What happens in your browser
Label rendering, barcode encoding and preview all run on your own machine. Opening a label, editing ZPL and watching the preview update send nothing to us the drawing happens locally. Your label reaches our servers when you save it, and not before.
5Why we use it, and on what basis
- To provide the service signing you in, storing your labels, answering assistant requests, letting API keys work. Without this we cannot give you an account at all, so the basis is performance of our agreement with you.
- To keep it securesession records and rate limits exist to detect and stop abuse. The basis is our legitimate interest in a service that is not being attacked.
- To reply to you if you write to us, we use your address to answer. The basis is your request.
We do not use your labels, your data grids or your assistant conversations to train AI models, and we do not use them for marketing.
6Who else sees it
We do not sell your information and we do not share it for anyone else’s marketing. These are the only organisations that process it on our behalf:
| Who | For what | Details |
|---|---|---|
| Sign-in | Verifies who you are when you sign in and returns your name, email address and profile picture. | |
| Supabase | Database hosting | Stores your account, labels and settings. The database for this deployment runs on AWS infrastructure in Sydney, Australia (ap-southeast-2). |
| Anthropic | AI assistant | Receives the request you type and the ZPL of the label you have open, so it can answer. Only used when you use the assistant. |
| Email provider | Contact form | Delivers messages sent through the contact form. Nothing else is sent through it. |
We may also disclose information where the law requires it, or where it is necessary to establish or defend a legal claim.
7Where your information is held
The database for this deployment runs in Sydney, Australia. Our other providers may process information in other countries, including the United States. Where information leaves the region you are in, it is protected by the transfer safeguards those providers have in place, such as standard contractual clauses.
8How long we keep it
- Labels, folders and settings: for as long as your account exists.
- Sessions: until they expire, or until you sign out whichever comes first. Signing out everywhere ends them all immediately.
- API keys: until you revoke them.
- Assistant conversations: for as long as the label they belong to exists.
- Contact messages: kept in our mailbox as long as needed to deal with what you wrote about.
Deleting a label removes it and anything attached to it. Deleting your account removes your account record and everything linked to it. Backups may retain a copy for a short period before they are cycled out.
9Your rights
Depending on where you live, you may have some or all of the following rights over the information we hold about you:
- Access ask for a copy of it.
- Correction ask us to fix anything inaccurate. Your name is editable in settings; your email address comes from Google and changes when you change it there.
- Deletion ask us to erase your account and its contents.
- Portability ask for your labels in a machine-readable form. You can also export any label as ZPL or PDF at any time, without asking.
- Objection and restriction ask us to stop or limit a particular use.
- Complaint raise it with your local data protection authority.
Write to info@ezpl.online and we will deal with it. We will not charge you or make the service worse for having asked.
10Your own customers' data
Labels frequently carry other people’s personal information a recipient’s name, a delivery address, an order number. If you put that into EZPL, you decide what goes in and why, and we simply hold it for you. In data protection terms you are the controller of it and we are your processor.
That means it is on you to have a lawful reason for putting it here and to tell the people concerned as your own privacy notice requires. On our side, we only process it to run the service for you, we apply the protections described in this policy, and we delete it when you delete it.
Two practical suggestions. Do not paste more personal information into the AI assistant than the question needs it is sent to our AI provider to be answered. And prefer the ^FN placeholder fields with a data grid over typing personal details directly into a saved label, so the design and the data stay separable.
11How we protect it
- Traffic between your browser and our servers is encrypted, as is the connection between our servers and the database.
- Sign-in is handled by Google. We hold no passwords, so there are none to leak.
- Session tokens and API keys are stored only as hashes. A copy of our database could not be replayed as a working login or a working key.
- Sign-in is protected against cross-site request forgery, token replay and code interception.
No service can promise perfect security, and we will not pretend otherwise. If a breach affects your information and the law requires us to tell you, we will.
12Children
EZPL is not intended for children. You must be at least 16 to hold an account. If you believe a child has given us their information, write to info@ezpl.online and we will remove it.
13Changes to this policy
We may update this policy as the product changes. The date at the top always reflects the current version. If a change materially affects how we handle your information, we will tell account holders by email or by a notice in the app before it takes effect.
14Contact
Questions about this policy, or about anything we hold on you, go to info@ezpl.online. You can also use the contact form in the site footer.
EZPL is an independent third-party tool and is not affiliated with, endorsed by, or sponsored by Zebra Technologies Corporation. Zebra and related trademarks are the property of their respective owners.