Privacy Policy

Read the eLabelCropper Privacy Policy. All shipping label PDF processing occurs locally in your browser. Learn how we handle account authentication, fair-use trial verification, and user rights under GDPR, CCPA, and DPDP Act 2023.

Last updated: August 18, 2026

1. Overview & Architecture Distinction

eLabelCropper ("we", "us", or "our") operates the website at elabelcropper.com. This Privacy Policy transparently explains our data practices, how we protect your privacy, and our strict adherence to global data protection regulations including the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and India's Digital Personal Data Protection (DPDP) Act 2023.

The short version: We operate on a Privacy-by-Design architecture. All PDF and shipping label cropping happens 100% locally inside your browser. We never upload, store, or view your shipping labels, buyer addresses, or customer data.

2. Zero File Upload & Storage Guarantee

eLabelCropper is engineered from the ground up to ensure absolute data privacy for e-commerce sellers and their customers. We guarantee the following:

  • Your uploaded PDF documents, invoices, and shipping labels are NEVER uploaded to our servers or third-party cloud storage.
  • Buyer and recipient personal information (names, delivery addresses, phone numbers, order values) never leaves your local device.
  • Order IDs, Tracking Numbers, AWB barcodes, and manifest data are processed strictly in client-side memory using WebAssembly/JavaScript and are destroyed when you close or reload the browser tab.
  • We have zero access to the contents of any files processed on our platform.

All file processing (cropping, splitting, barcode detection, SKU sorting) executes entirely within your web browser.

3. Data Collection on Meesho, Flipkart & Amazon Cropper Tools

While our general website and free utility tools require no account and collect no user identifiers, our advanced platform cropper tools (specifically Meesho Shipping Label Cropper, Flipkart Shipping Label Cropper, and Amazon IN Shipping Label Cropper) provide a 3-Day Free Trial and premium subscription features. To manage trial access and prevent service abuse, the following data is collected upon explicit user consent:

3.1 Google Account Authentication

When you choose to sign in using Google Authentication, we receive basic profile information provided by Google OAuth (managed securely via Google Firebase Authentication):

  • Your full name and Google display name
  • Your verified email address
  • Your Google profile avatar URL
  • A unique Google user identifier (UID)

We use this information strictly to identify your account, authenticate your login sessions, and track your subscription/trial status.

3.2 Security, Fair-Use Verification & Fraud Prevention

To prevent trial abuse (such as automated script spam or creating multiple accounts to circumvent the 3-day trial limit) and ensure platform security, we collect technical connection metadata:

  • Public IP address and cryptographic SHA-256 hashed representation stored in our secure database
  • Approximate geographic location (City, State/Region, Country, Timezone, and ISP) derived via HTTPS GeoIP lookup services
  • Device and browser technical metadata (Browser name, device category: mobile/desktop/tablet, screen parameters)
  • A pseudonymous browser fingerprint identifier stored in your browser's local storage (_ec_device_fp_v1)

This technical data is processed solely under our legitimate interest and your explicit consent to safeguard service integrity and enforce one 3-day trial per user/device/network.

3.3 Tool Usage Statistics

To provide customer support, optimize performance, and calculate platform usage quotas, we log aggregate metrics including total count of PDF batches processed, total label count, and last active timestamp. These counters contain numbers only and never contain any label content or customer details.

3.4 Payment & Subscription Information

If you upgrade to an eLabelCropper Pro membership, payment transactions are processed securely through our PCI-DSS compliant payment gateway, Razorpay. We store only the Razorpay Payment ID, Plan type, and expiration timestamps. We NEVER collect, see, or store your credit/debit card numbers, CVVs, UPI PINs, or net banking credentials.

4. General Website Analytics & Advertising

When browsing our informational pages, blog posts, and public utility tools, we use standard, privacy-conscious web technologies:

4.1 Google Analytics (GA4)

We use Google Analytics to analyze website traffic patterns and improve our website structure. GA4 collects anonymized telemetry including pages visited, session duration, device type, and approximate city/country. IP addresses are anonymized by default by Google.

You can opt out of Google Analytics across all websites by installing the official Google Analytics Opt-Out Browser Add-on.

4.2 Google AdSense

We may display advertisements served by Google AdSense to support our free tools. Google uses cookies and web beacons to serve ads based on user visits. You can manage or disable personalized advertising anytime in your Google Ads Settings.

4.3 Local Storage & Essential Cookies

We use browser localStorage to remember your UI preferences (selected language, theme, crop margin preferences). These stay on your machine and are not transmitted to us.

5. Legal Bases for Processing (GDPR & DPDP Act 2023)

We process personal data only when lawful legal grounds exist under applicable data protection laws:

  • Consent (GDPR Art. 6(1)(a), India DPDP Act 2023 Sec. 6): When you check the consent box and sign in with Google to use the 3-day trial on Meesho, Flipkart, or Amazon cropper tools.
  • Legitimate Interests (GDPR Art. 6(1)(f)): To prevent free-trial abuse, protect our network infrastructure from fraud/bot attacks, and maintain service reliability.
  • Performance of Contract (GDPR Art. 6(1)(b)): To provide and maintain paid subscription services and process membership renewals.
  • Legal Obligation (GDPR Art. 6(1)(c)): To retain tax invoices and statutory transaction records required under financial regulations.

6. Third-Party Service Providers (Data Sub-Processors)

We share minimal required data with trusted third-party service providers who comply with strict data security standards:

  • Google Firebase / Google Cloud: Authentication, encrypted database hosting (Firestore), and infrastructure.
  • Razorpay: PCI-DSS Level 1 compliant payment processing for Pro subscriptions.
  • IP & Geolocation Services (ipapi.co, db-ip.com, Cloudflare, ipify): Resolving approximate region and connection telemetry for fair-use verification.
  • Google Analytics & Google AdSense: Aggregated traffic measurement and advertising.

7. Data Retention & Erasure (Right to be Forgotten)

We retain account and security verification records only for as long as necessary to provide service access, enforce subscription terms, and prevent fraud. You have the permanent right to request full erasure of your personal data.

To request complete deletion of your account, Google profile records, IP registry logs, and usage history, simply email us at elabelcropper@gmail.com with the subject line 'Data Deletion Request'. We will process your request within 7 business days.

8. Data Security Standards

We implement robust technical and organizational security measures:

  • All website communications are strictly encrypted using HTTPS / TLS 1.3.
  • Database records in Google Cloud Firestore are protected with enterprise-grade encryption at rest and strict role-based access rules.
  • IP addresses used for fraud prevention are hashed using SHA-256 cryptographic algorithms.
  • No sensitive payment details are ever handled directly on our infrastructure.

9. Your Rights under GDPR, CCPA/CPRA & India DPDP Act

Depending on your jurisdiction, you have extensive statutory privacy rights regarding your personal information:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate personal data.
  • Right to Erasure: Request permanent deletion of your account and associated logs.
  • Right to Withdraw Consent: Revoke previously granted consent at any time.
  • Right to Restrict / Object: Object to processing of data based on legitimate interests.
  • Right to Data Portability: Receive your account information in a structured, machine-readable format.
  • Right to Non-Discrimination: We will never discriminate against you for exercising your privacy rights.

10. Children's Privacy

eLabelCropper is an e-commerce seller productivity tool intended for business users and is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has registered an account, please contact us immediately for prompt deletion.

11. Contact Us & Data Privacy Inquiries

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Team at:

  • Email: elabelcropper@gmail.com
  • Website: elabelcropper.com
  • Response Time: Within 24-48 business hours