Privacy Policy
Last updated on 21 September 2026
EasyZPL does not keep the contents of your labels. Not the file you upload, not the images it renders, not the PDF, not the filename. None of it is written anywhere: the server converts in memory and discards everything when it answers.
Who is responsible
EasyZPL (easyzpl.com) is operated from Brazil by Vinicius Aguilar, an individual, who acts as the controller of the personal data handled here. Any request about your data, including access, correction and deletion, goes to support@easyzpl.com, the same address as support.
Why zero retention matters
A shipping label carries the recipient's full name, address, tax number and phone. That is third-party data, in your hands so you can print it, and we have no reason at all to keep it.
Zero retention is not a statement of intent: it is how the system was built. The service that renders your labels opens no files and writes nothing to disk. It receives the ZPL, returns the image and forgets.
What the conversion receives, and for how long
| Data | Retention |
|---|---|
| The ZPL file's contents | Only during the conversion |
| Rendered images and PDF | Only during the conversion |
| Filename | Never leaves your browser |
| IP address, turned into a code | 2 minutes |
| Label count and conversion duration | A few days, with no link to you |
The code derived from your IP exists for one reason: to stop a single person from consuming the whole service. It is built with a secret key that never leaves our servers, which prevents anyone from going back from the code to the address, and it deletes itself after two minutes.
What your account stores
An account is optional. Without one you convert up to 50 labels at a time and nothing of yours is stored. With one, we store the minimum needed for it to exist:
| Data | What for |
|---|---|
| Email address | Identifying the account, confirming sign-up and resetting the password |
| Name, if you give one | Addressing you by name in the interface |
| Password, always hashed | Signing in. Nobody here sees your password, neither we nor the service that stores it |
| Theme and language | Opening the site the way you left it |
| Saved label sizes | Repeating a label setup without retyping it. These are measurements, not label content |
| How many labels, and when | Showing your history and applying your plan's limit. It is a count and a date, and nothing that describes the label |
| Plan | Knowing how many labels you may convert |
| Photo, if you upload one | Showing in your menu and on your account page. It is kept in private storage, visible only to you, and really deleted when you remove it |
What the account does not store is still the main point: no ZPL, no images, no PDF, no filenames. Having an account does not change the zero retention of your label contents.
Signing in with Google
If you choose to sign in with Google, we receive from Google only your name, your email address and your profile picture, and only to create or recognise your account. No other data from your Google account is requested or accessed.
That data is not used for advertising, not sold, not shared with third parties and not used to train any model. You can revoke access at any time in your Google account permissions, and you can delete your account here through the contact address above.
Cookies
EasyZPL uses no tracking, profiling or advertising cookies. The site shows no ads today, and this page will be updated before that changes. These are the cookies that exist:
| Cookie | What for |
|---|---|
| Session | Keeping you signed in. It only exists if you have an account |
| Theme | Remembering whether you chose light, dark or follow the system |
| Language | Opening the site in the language you picked |
| Cloudflare Turnstile | Telling people from bots on the sign-up and password recovery screens |
Who we share with, and where the data sits
We do not sell data and we do not share it for advertising. Data passes only through the companies that run the infrastructure, each for its own part, and none of them uses it for purposes of their own:
| Company | Role |
|---|---|
| Cloudflare | Serves the site, guards against abuse and delivers Turnstile |
| Amazon Web Services | Renders the labels, in memory, on servers in the United States |
| Supabase | Stores accounts and the data in the table above, on servers in the United States |
| Resend | Delivers the sign-up confirmation and password recovery emails |
Because these services run outside Brazil, there is an international transfer of data. It happens in order to perform the contract you enter into by using the service, under article 33 of the Lei Geral de Proteção de Dados, the Brazilian data protection law that governs this service, and the transport is always encrypted, from your browser to the conversion and back.
The legal basis for each use
| Use | Legal basis |
|---|---|
| Converting the file you upload | Performance of a contract (art. 7, V) |
| Keeping your account and its history | Performance of a contract (art. 7, V) |
| Limiting abuse, through the code derived from your address | Legitimate interest (art. 7, IX) |
| Keeping tax records of payment | Legal obligation (art. 7, II and art. 16, I) |
If you delete your account
Your profile and your saved sizes are deleted. The record of how many labels were converted and when is unlinked from you: without the link, what remains is a count that identifies nobody, and we keep it only to know how much the service is used.
Tax records of payment, once they exist, are kept for as long as the law requires, even after a deletion request, and only to meet that obligation. The service charges nothing today, so no such record exists.
Your rights
The Lei Geral de Proteção de Dados gives you the right to ask for confirmation that we process your data, access, correction, portability, information about who we share it with, withdrawal of consent and deletion of your personal data.
For any of those, write to support@easyzpl.com. We answer within fifteen days. Until the delete-account screen exists, the request by email has the same effect and is carried out by hand.
For the conversion itself there is nothing to delete, because none of your label contents is stored.
Security
Traffic is encrypted end to end from your browser to the conversion. Passwords are stored hashed and never in the clear. Every row in the database is protected by a rule tying the data to the account that owns it, so one account cannot reach another's. Service credentials live in a vault, outside the code.
Minors
The service is aimed at people who ship and print labels and is not intended for anyone under 18. We do not knowingly collect data from children or teenagers. If that happens, write to the address above and we will delete it.
Changes to this policy
If something changes, such as ads or billing, this page changes with it and the date above is updated. Any change affecting what we store will be announced before it takes effect.