Label Studio
← Back to the tool

Privacy policy

Last updated 18 August 2026.

This policy has two parts, because two different things are going on and conflating them is how privacy policies end up meaningless. Part one is what the label tool does with the spreadsheet you give it: the answer is that it never leaves your browser. Part two is what the website around the tool does — the fonts and code libraries it fetches, and the analytics and advertising that may run on it.

Nothing in part two changes anything in part one. No script on this site, including any advertising script, is given access to your spreadsheet, your addresses, or your label content.

Part one — what the tool does with your data

Your spreadsheet never leaves your browser

This is a static site with no backend, no database and no API. When you upload a file or paste data, it is read by JavaScript running in your own browser tab. The PDF is assembled in that same tab and the download comes from your machine's memory.

No spreadsheet, no file, no address, and no label content is ever transmitted to this site or anywhere else. There is no upload step because there is no server to receive one. Everything you enter is discarded when you close the tab.

This is a property of how the site is built rather than a promise about how it is operated, which is why it is stated first and separately from everything below. You can confirm it yourself: open your browser's network inspector, generate a sheet of labels, and watch that no request carries your data.

What the tool stores on your device

One item: your light or dark theme preference, saved in your browser's localStorage under the key fba-theme, so the site remembers your choice on your next visit. It contains no personal data and is never sent anywhere. Clearing your browser's site data removes it.

Your spreadsheet is not saved to localStorage, not cached, and not restored between visits. Reloading the page loses it, which is deliberate.

Part two — what this website does

Third-party requests the page makes

Loading a page on this site causes your browser to request files from other hosts. Those hosts necessarily see the request, which includes your IP address and browser user-agent, as any web request does. They do not receive your spreadsheet or label content.

Each of those providers has its own privacy policy governing what it does with request logs.

Cookies

This site currently sets no cookies of its own, and no third party sets a cookie through it. The only thing stored on your device is the theme preference described in part one, which is localStorage rather than a cookie and is never sent with a request.

Analytics

This site currently runs no analytics. There is no Google Analytics tag, no page-view counter, and no event tracking of any kind. The rest of this section is written in advance so that this page is accurate on the day analytics is added rather than a week later.

Analytics measures page usage, not file contents. Whatever is measured, the claim in part one holds unchanged, because the spreadsheet is never in a form any script on the page can send anywhere. How Google handles data from sites that use its services is described at policies.google.com/technologies/partner-sites.

Advertising

This site currently displays no advertising and carries no advertising network scripts. Everything in the rest of this section describes how advertising works here when it is switched on. It is written and published in advance, so that it is accurate from the first ad impression rather than backfilled afterwards.

Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to users based on their visit to this site and/or other sites on the Internet.

Serving an ad means your browser contacts Google's ad servers. Those servers receive your IP address, user-agent, the page you are on, and any advertising cookies already set. They may use that to select an ad, to measure whether it was seen, and to detect invalid traffic. They do not receive anything you typed or uploaded into the tool.

You can opt out of personalised advertising by Google at My Ad Center, and out of personalised advertising by many vendors at once through the Digital Advertising Alliance's WebChoices tool. In Europe the equivalent is Your Online Choices. Opting out stops personalisation; it does not stop advertising, and you will still see ads.

If you are in the EEA, the UK or Switzerland, a consent banner asks before any advertising or measurement cookie is set. It is served through a consent management platform certified by Google, as Google requires for personalised advertising in those regions. Declining is a real option and is not penalised: you get non-personalised ads instead, and the tool works identically either way. You can change or withdraw that choice at any time from the link in the site footer, and Google's account of what it does with publisher data is at business.safety.google/privacy.

If you are in a US state with a comprehensive privacy law, including California, you have the right to opt out of the sale or sharing of personal information and of targeted advertising. Using the opt-out links above achieves this for advertising on this site. This site does not sell personal information in the ordinary sense of the phrase — there is no customer database here to sell — but "sale" and "sharing" are defined broadly enough in several of those statutes to cover ad-cookie data, which is why the controls are offered rather than argued about. A Global Privacy Control signal sent by your browser is honoured.

Advertising scripts are not given access to your spreadsheet data. That is not a policy commitment that could quietly change — the data is never in a form any script on the page shares externally, which is the same structural fact set out in part one.

Children

This site is a general-purpose utility for printing labels and is not directed at children under 13. It knowingly collects no personal information from anyone, including children, and no part of it is tagged for child-directed treatment because no part of it is aimed at children.

Your rights and how to exercise them

There is no account, no login, and no user record on this site, so there is no stored profile to request, correct or delete — a data access request would return nothing, because nothing is held. What you can control is on your own device: clear your browser's site data to remove the theme preference and any advertising cookies, and use the opt-out links above to limit personalisation.

If you have a question about any of this, or want something explained in more detail than this page gives, the contact page has an address that reaches a person.

Changes

Material changes to this policy will be reflected in the "last updated" date above. The analytics and advertising sections are maintained in step with what actually runs on the site: each is switched by a single flag in this page's source, so the wording and the reality change in the same commit.