Privacy

Last updated 26 August 2026. This policy may be updated as the service grows; the current version applies.

Short version: the label tools run in your browser, we never see your card details, and you can download or erase everything we hold with one click.

Who is responsible

Small Print Labels is run as a sole trader based in Sweden, and is the data controller for the personal data described here. Reach us at support@smallprintlabels.com.

What we collect

Your recipes stay yours. Every label is calculated on your device. Nothing you type is sent anywhere unless you choose to save it.

• Nothing at all if you use the tools without an account. Your work is stored in your own browser and never leaves it.
• Your email address if you create an account. It is how you sign in: there are no passwords, so we email you a link instead.
• Your saved designs if you are signed in, so they survive a cleared browser and follow you between devices.
• Your email address if you join the free regulatory-change alerts list. Every alert carries a one-click unsubscribe link.
• Anonymous usage counts: which pages are visited and which buttons are pressed. No identifiers, no profile, nothing that points back to a person.

Why we are allowed to hold it

Your account email and saved designs are processed to provide the service you asked for (performing our contract with you). The alerts list runs on your consent, which you can withdraw from any alert email. The anonymous usage counts rest on our legitimate interest in knowing whether the site works, and are kept anonymous precisely so that interest stays a light one.

Payments

Paddle.com Market Ltd is the merchant of record for every purchase. They take the payment, handle the tax, and issue your receipt. We never see or store card details. Paddle holds its own record of your transaction under its own privacy policy, and is legally required to keep it even after you delete your account here.

Who else touches your data

• Cloudflare hosts the site, the database and the analytics counts.
• Paddle processes payments, as above.
• Resend delivers sign-in links and alert emails.

That is the whole list. Some of these providers operate outside the EU and EEA, in which case the transfer relies on the European Commission's standard contractual clauses. We do not sell personal data, and we do not share it for advertising.

Cookies

One cookie, set only when you sign in, which keeps you signed in. It is strictly necessary, so there is no consent banner to click. Our analytics does not use cookies and does not track you between sites. Your saved designs live in your browser's local storage, not in a cookie.

How long we keep it

Your account and designs stay until you delete them. Sign-in links expire after 15 minutes, and sessions after 30 days. Alerts subscriptions stay until you unsubscribe. Anonymous usage counts have no personal data to expire.

Your rights, without asking

Under the GDPR you may access, correct, export, restrict or erase your personal data, and object to how it is used. For the two that matter most we built the buttons rather than a request form: on your account you can download everything we hold about you as a file, and delete your accountoutright, which erases your email address, your saved designs and your plan record immediately. For anything else, ask us.

If you think we have handled your data badly, please tell us first, but you also have the right to complain to your data protection authority. In Sweden that is the Swedish Authority for Privacy Protection (IMY).