Privacy Policy

Last updated: 12 October 2026

This policy explains what personal data OpenLabelMaker processes when you visit openlabelmaker.com, use the label editor, create an account, subscribe to a paid plan or use our API — why we do it, who helps us, how long we keep it and what your rights are.

1. Who we are

The controller responsible for your personal data is ABQ Marketing, trading as OpenLabelMaker, registered with the Dutch Chamber of Commerce (KvK) under number 64247023, the Netherlands.

For any privacy question or request, use our contact form (choose “Privacy / data request”).

2. What we process and why

2.1 Visiting the website

• Server logs. When your browser requests a page, our server records your IP address, browser type (user agent), the page requested, the referring page and the time. We use this to keep the site secure and working, and to detect and block abuse. Legal basis: our legitimate interest in running a secure service.
• Cloudflare. Traffic to the site passes through Cloudflare, which protects it against attacks and delivers it quickly. Cloudflare processes your IP address and request data for that purpose. Legal basis: legitimate interest.
• Google Analytics (via Google Tag Manager). We use it to see which pages and features are used, so we can improve the product. It collects information such as pages visited, actions in the editor (for example that a label was printed — never the content of your label), device and browser type, and approximate location. Legal basis: your consent where required, otherwise our legitimate interest in improving the service.
• Fonts, libraries and images from third-party servers. Our pages load web fonts from Google Fonts, code libraries from public content delivery networks and small flag icons from a flag-image service. Your browser connects to these servers, which therefore receive your IP address.

2.2 Using the label editor without an account

• Your designs and imported data stay in your browser. The editor runs in your browser. Designs, text, images and any spreadsheet or CSV data you import are processed on your own device and are not sent to us. Your most recent design is kept in your browser's local storage so it can be restored if you close the tab.
• Server-side rendering. For a few features (for example rendering multi-page documents to PDF), the design is sent to our rendering server, processed to create the file and not kept afterwards.
• Advertising. Visitors who are not signed in see ads in the editor. These ads are served by Mediavine and its advertising partners, who may use cookies or similar identifiers to show and measure ads and, with your consent, to personalise them. Mediavine's script, including its consent tool, is loaded on every page of the website, but ads are shown only in the editor. Visitors in the EEA, UK and Switzerland are asked for consent through a consent message; if you do not consent, you still see ads, but they are not personalised. Signed-in users, including all paid plans, are not shown ads. More information: see the section Mediavine Programmatic Advertising below. Legal basis: your consent where required.

2.3 Your account

• Account data: your email address, your password (stored only as a secure hash), your plan and your email preferences.
• Saved designs: the designs you save to the cloud, including any spreadsheet data you imported into them, together with a preview image.
• Usage counters: the number of batch exports per month, to apply the free plan's limit.
• Teams (Business plan): team name, the email addresses of members and invited people, and their roles.
• API (Business plan): your API keys and the requests made with them, processed to return the rendered labels.

Legal basis: performance of our agreement with you (providing the account and the features you use).

2.4 Emails

• Service emails — a welcome email, password resets, email-address changes, team invitations and messages about your subscription. Legal basis: performance of our agreement.
• Product news — only if you opted in when signing up or later. Paying customers may also receive an occasional message about the plan they subscribe to, with an unsubscribe link. You can unsubscribe at any time with the link in every email or in your account settings. Legal basis: your consent.

2.5 Payments

Paid plans are billed by Stripe. You enter your payment details directly with Stripe; we never receive or store your card number. We receive your email address, a customer and subscription reference, your plan and the payment status. Legal basis: performance of our agreement and our legal obligation to keep financial records.

2.6 Contacting us

If you use our contact form, we use your email address and message to answer you. Legal basis: our legitimate interest in responding, or taking steps at your request before entering into an agreement.

3. Who we share data with

We use the following service providers, who process personal data on our behalf and only for the purposes described above:

We do not sell your personal data and we do not share it with anyone else, unless the law requires us to (for example at the request of a competent authority).

4. International transfers

Some of these providers (including Google, Mediavine, Stripe, Cloudflare and Supabase) are based in the United States or may process data outside the European Economic Area. Where that happens, the transfer is protected by the EU–US Data Privacy Framework or by the European Commission's Standard Contractual Clauses.

5. How long we keep data

• Server logs: 14 days.
• Account data and saved designs: for as long as you have an account. When you ask us to delete your account, we delete this data, except where the law requires us to keep it.
• Payment and invoice records: 7 years, as required by Dutch tax law.
• Product-news subscription: until you unsubscribe.
• Emails and contact-form messages: as long as needed to handle your question, and at most 2 years afterwards.
• Analytics and advertising data: according to the retention settings and policies of Google.
• Data in your browser: until you clear your browser's storage.

6. Cookies and local storage

We use the following cookies and browser storage:

You can delete cookies and local storage in your browser settings at any time. Deleting olm-autosave removes the design restored from your last visit.

Mediavine Programmatic Advertising (Ver 1.1)

The Website works with Mediavine to manage third-party interest-based advertising appearing on the Website. Mediavine serves content and advertisements when you visit the Website, which may use first and third-party cookies. A cookie is a small text file which is sent to your computer or mobile device (referred to in this policy as a "device") by the web server so that a website can remember some information about your browsing activity on the Website.

First party cookies are created by the website that you are visiting. A third-party cookie is frequently used in behavioral advertising and analytics and is created by a domain other than the website you are visiting. Third-party cookies, tags, pixels, beacons and other similar technologies (collectively, "Tags") may be placed on the Website to monitor interaction with advertising content and to target and optimize advertising. Each internet browser has functionality so that you can block both first and third-party cookies and clear your browser's cache. The "help" feature of the menu bar on most browsers will tell you how to stop accepting new cookies, how to receive notification of new cookies, how to disable existing cookies and how to clear your browser's cache. For more information about cookies and how to disable them, you can consult the information at https://www.allaboutcookies.org/manage-cookies/.

Without cookies you may not be able to take full advantage of the Website content and features. Please note that rejecting cookies does not mean that you will no longer see ads when you visit our Site. In the event you opt-out, you will still see non-personalized advertisements on the Website.

The Website collects the following data using a cookie when serving personalized ads:

• IP Address
• Operating System type
• Operating System version
• Device Type
• Language of the website
• Web browser type
• Email (in hashed form)

Mediavine Partners (companies listed below with whom Mediavine shares data) may also use this data to link to other end user information the partner has independently collected to deliver targeted advertisements. Mediavine Partners may also separately collect data about end users from other sources, such as advertising IDs or pixels, and link that data to data collected from Mediavine publishers in order to provide interest-based advertising across your online experience, including devices, browsers and apps. This data includes usage data, cookie information, device information, information about interactions between users and advertisements and websites, geolocation data, traffic data, and information about a visitor's referral source to a particular website. Mediavine Partners may also create unique IDs to create audience segments, which are used to provide targeted advertising.

If you would like more information about this practice and to know your choices to opt-in or opt-out of this data collection, please visit https://thenai.org/opt-out/. You may also visit http://optout.aboutads.info/#/ and http://optout.networkadvertising.org/#/ to learn more information about interest-based advertising. You may download the AppChoices app at https://youradchoices.com/appchoices to opt out in connection with mobile apps, or use the platform controls on your mobile device to opt out.

For specific information about Mediavine Partners, the data each collects and their data collection and privacy policies, please visit https://www.mediavine.com/ad-partners/.

7. Your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

• access the personal data we hold about you;
• have incorrect data corrected;
• have your data deleted;
• restrict or object to certain processing, including processing based on our legitimate interest;
• receive your data in a portable format;
• withdraw your consent at any time, without affecting processing that happened before.

To use any of these rights, use our contact form (choose “Privacy / data request”). We answer within one month. We may ask you to confirm your identity first.

If you are not satisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or with the supervisory authority in your own country.

8. Security

We protect your data with encrypted connections (HTTPS), restricted access to our systems and hashed passwords. No online service can guarantee absolute security, but we take reasonable measures to protect your data against loss and unauthorised access.

9. Children

OpenLabelMaker is not intended for children under 16. We do not knowingly collect personal data from children under 16.

10. Automated decisions

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

11. Changes to this policy

We may update this policy when our service or the law changes. The date at the top shows when it was last updated. If we make significant changes, we will let account holders know by email.

12. Contact

ABQ Marketing, trading as OpenLabelMaker
KvK 64247023, the Netherlands
Contact: openlabelmaker.com/contact