BetaFree label tools in beta. Keep a design backup and test your printed output.Free service limits

Privacy Policy

Last updated: September 9, 2026 · BarcodeStack (barcodestack.com)

1. Overview

BarcodeStack provides free label-design tools. Normal editing and browser PDF, PNG and ZPL exports run on your device. Optional cloud saving and API calls send data to our servers. The site also sends limited automatic error diagnostics. These are separate activities; using a free account does not mean everything stays on your device.

Advertising, paid checkout and optional visitor-analytics scripts are disabled. We do not use label designs to target advertising or train an AI model.

2. Local editing and files

Text, images and imported rows used for normal editing are processed in your browser. Work in progress is saved in local storage in your browser profile. That copy can remain after signing out and may be accessible to someone using the same device and browser profile. Clearing site data removes it. Downloaded designs and exported labels remain wherever you save or share them; deleting a cloud copy does not delete those files.

Use local file upload or paste for private spreadsheets. Importing a Google Sheet by link contacts Google from your browser and requires a sheet already accessible to anyone with that link. Do not make a private customer or order spreadsheet broadly accessible to use this feature. Download it and import the file instead.

3. Accounts, cloud designs and the API

  • Accounts. Auth0 handles sign-in and your credentials or social-login information. BarcodeStack stores your email address, Auth0 identifier, account creation information, session records and API-key metadata in Cloudflare D1. We do not receive your password. API keys are shown to you when created and stored as hashes.
  • Cloud saves. Choosing Save to cloud sends the design to Cloudflare D1, associated with your account. It includes its text, embedded images and saved spreadsheet rows. You can load and delete your saved designs. The editor limits how many imported rows are saved with a design; a large import is not a complete cloud backup.
  • API calls. Requests reach our servers, including any label specification, merge values or data rows you send. Render requests are processed to return the requested output; the application does not intentionally retain their bodies. A design-save API request deliberately stores a design. Request metadata may remain in operational logs.
  • Information about others. Only upload information you are authorized to use. Do not put passwords, API secrets, payment-card data or regulated patient records in labels, API requests or support messages. If you need to process customer data under a data-processing agreement, contact us before using cloud/API features for that purpose.

4. Diagnostics and hosting metadata

Cloudflare processes network and request information, including IP addresses, user-agent information and request metadata, to deliver the service, prevent abuse and operate its infrastructure. Operational logs and aggregate hosting measurements help us investigate failures. They are separate from label content and from advertising.

When the editor or a page fails, the browser can send a diagnostic report to /api/errors. Updated reports omit the free-text error message and include structured error information, bounded stack frames, a normalized page path, report source, error digest, coarse browser family and time. The report is sent without cookies and does not attach the canvas, images, spreadsheet rows, account ID or API key. Requests still reach the host with ordinary network metadata. Repeated errors may be grouped with a count.

Older diagnostic reports could contain fragments of label content quoted in an error message, despite best-effort redaction. Those existing reports remain subject to deletion on the retention schedule below. We use diagnostics to investigate and fix faults, not for advertising.

To disable diagnostic reports in this browser, turn off “Send minimal diagnostic reports” in the editor. You can also set localStorage.setItem("barcodestack:no-reports", "1") in the developer console. Blocking requests to /api/errors also prevents them. The setting applies to this browser profile until you remove it or clear site storage.

Template favorites and likes

Browser favorites store template IDs on your device. Signed-in favorites and likes store the template ID, your choice and its update time with your account; they do not upload an edited label. Like totals can be shown with templates. Remove your choices using the same controls; account deletion also removes account reactions. Browser favorites are separate and can be removed in the library or by clearing site storage.

5. Cookies, fonts and external services

Sign-in uses session and temporary authentication cookies. Browser storage also keeps editor work and preferences. Font files supplied with the site are served from our own hosting; selecting those fonts does not call the Google Fonts API from your browser. Opening an external link, importing a public Google Sheet or using your own printer software can involve the provider you choose and its own privacy practices.

BarcodeStack does not load advertising scripts or optional visitor-analytics beacons. Ordinary hosting, security and error processing still takes place as described above.

6. Purposes and recipients

We use information to provide the functions you request, manage accounts and access, store the designs you choose to save, prevent abuse, investigate faults and answer support requests. Our providers include Cloudflare for hosting and storage and Auth0 for authentication. Support messages pass through our email providers.

We do not sell label designs or personal information or share them for targeted advertising. We may disclose information where required by law or in a transfer of the service, subject to applicable obligations. Sending a label to an API client, external service, AI assistant or printer that you choose may disclose it to that recipient; give those tools only the access they need.

Infrastructure providers may process information in more than one country. Contact us for details relevant to your use before sending data that requires a particular location or contractual arrangement. Using the site is not consent to unrelated processing.

7. Retention and deletion

Local browser copies remain until overwritten or cleared. Account and cloud records remain while needed to provide your account, unless you delete a design or request account deletion. Email support@barcodestack.com to request account export or deletion. We verify the request and applicable exceptions before acting; an export request does not itself delete your account.

Diagnostic reports are removed within 90 days of their first recorded occurrence; an hourly cleanup removes eligible records independently of incoming traffic. A bounded report store may remove them sooner. Backup copies expire under the hosting recovery schedule and are not ordinary active storage. If a backup is restored, deletion records must be reapplied. A valid legal preservation requirement may require a limited exception.

Hosting-log and support-record retention depend on their operational purpose and provider settings. Contact us for information about retained records relating to you. We retain only what is needed for the relevant purpose or a legal obligation.

8. Requests and choices

Depending on applicable law, you may have rights to access, correct, delete or export personal information, object to processing, restrict it, or complain to a relevant regulator. Send requests to support@barcodestack.com. We may ask for proportionate identity verification and will explain any applicable exception. Do not send passwords or unnecessary identity documents.

9. Children

The service is intended for general business and personal label design, not for children under 13. Do not create an account or submit personal information if you are under 13. Contact us if you believe a child has supplied personal information so we can investigate.

10. Security, changes and contact

Connections to the hosted site use TLS and sign-in is handled by Auth0. No system is perfectly secure. Keep independent copies of important designs and protect your account and API keys. Send privacy questions to support@barcodestack.com.

Material changes to data use will be explained on the site and this policy will be updated. See also the Terms of Service and Disclaimer.