Last Updated: December 19, 2025
1. Introduction
This Privacy Policy describes how OdinoLabel (“we”, “our”, or “the App”) collects, uses, and protects your information when you use our professional label creation application.
OdinoLabel is committed to protecting your privacy. Your label projects and designs remain completely private and are stored only on your local device. However, the App requires account registration and periodic online verification for license management.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
| Data | Purpose |
|---|---|
| Email address | Account identification and communication |
| Password (encrypted) | Account security |
| Display name | Personalization |
| Account type | Business or Personal classification |
| Google account info | If using Google Sign-In |
2.2 License and Subscription Data
| Data | Purpose |
|---|---|
| License type and status | Feature access management |
| License activation code | Easy OEM license verification |
| Purchase date | Trial and subscription management |
| Subscription status | Billing and renewal management |
| Trial start date | 14-day trial period calculation |
| Trial end date | Trial expiration management |
2.3 Device Information
| Data | Purpose |
|---|---|
| Hardware identifier (hashed) | License verification, fraud prevention, and trial abuse prevention |
| Hardware identifier last 4 characters | Technical support identification |
| macOS version | Compatibility and support |
| App version | Support and updates |
| Last online verification date | Offline grace period management |
Important: Your Mac’s hardware identifier is cryptographically hashed using SHA-256 before transmission. We never store or transmit your actual hardware serial number. Only the irreversible hash is stored on our servers.
2.4 Trial Abuse Prevention Data
To prevent abuse of our 14-day free trial, we maintain a record of devices that have used a trial period:
| Data | Purpose |
|---|---|
| Hashed device identifier | Prevent multiple trial periods on same device |
| Last 4 characters of device ID | Technical support reference |
| Trial usage date | Record of when trial was used |
| Associated user email | Support and fraud investigation |
| Associated user ID | Account linkage |
Important: This data is stored permanently to ensure each physical device can only use one trial period, regardless of how many accounts are created. This is a standard anti-fraud measure used by software companies to prevent trial abuse.
2.5 Data Stored Locally Only
The following data is stored exclusively on your device and is never transmitted to our servers:
- Label projects and documents (.odino files)
- App preferences and settings
- Recent files list
- Window positions and UI state
- Cached license data (for offline use)
3. How We Use Your Information
| Purpose | Legal Basis (GDPR) |
|---|---|
| Account creation and management | Contract performance |
| License verification and activation | Contract performance |
| Feature access based on subscription tier | Contract performance |
| Fraud prevention and license protection | Legitimate interest |
| Trial abuse prevention | Legitimate interest |
| Technical support | Contract performance |
| App improvement (anonymous analytics) | Legitimate interest |
| Communication about your account | Contract performance |
4. Data Storage and Security
4.1 Cloud Storage (Firebase)
Account and license data is securely stored using Google Firebase services:
- Firebase Authentication: Secure account management
- Firebase Firestore: License, subscription, and trial abuse prevention data
- Location: European Union (europe-west1 region)
- Encryption: Data encrypted in transit and at rest
- Access controls: Strict security rules limit data access
4.2 Local Storage
| Data | Storage Location | Protection |
|---|---|---|
| License cache | macOS Keychain | System-level encryption |
| App preferences | UserDefaults | App sandbox protection |
| Projects | User-selected location | macOS file permissions |
4.3 Security Measures
- All network communications use HTTPS/TLS encryption
- Passwords are never stored in plain text
- Hardware identifiers are hashed (SHA-256) before storage
- Firebase security rules restrict unauthorized access
- Regular security audits and updates
5. Online Requirements and Offline Use
5.1 Online Requirements
OdinoLabel requires an internet connection for:
- Account registration and login
- Initial license activation
- License verification (periodic)
- Subscription status updates
- Easy OEM code activation
- Trial eligibility verification
5.2 Offline Grace Period
- The App functions offline for up to 7 days
- After 7 days, internet connection is required to re-verify license
- Your projects remain accessible during offline periods
- Cached license data enables offline functionality
5.3 Fully Offline Features
These features work without any internet connection:
- Label editing and design
- Printing to local printers
- PDF export
- Opening and saving projects
6. Data Sharing
6.1 We Do NOT Share
- Your label projects or designs
- Personal information with advertisers
- Data for marketing purposes by third parties
6.2 Limited Sharing
| Third Party | Data Shared | Purpose |
|---|---|---|
| Google Firebase | Account & license data | Service infrastructure |
| Apple App Store | Purchase transactions | Payment processing |
| Apple (StoreKit) | Subscription status | In-app purchase management |
6.3 Legal Requirements
We may disclose data if required by:
- Court order or legal process
- Law enforcement requests
- Protection of our legal rights
7. Your Rights (GDPR Compliance)
7.1 European Users Rights
Under GDPR, you have the right to:
| Right | How to Exercise |
|---|---|
| Access | Request a copy of your data via email |
| Rectification | Update your data in Profile settings or contact us |
| Erasure | Request account deletion via email |
| Portability | Export your projects in standard formats |
| Restriction | Request limited processing via email |
| Object | Object to processing via email |
| Withdraw consent | Update preferences or delete account |
7.2 Response Time
We respond to data requests within 30 days as required by GDPR.
7.3 Data Deletion
When you delete your account:
- Account data is permanently removed from our servers
- License associations are terminated
- Trial abuse prevention data (hashed device ID) is retained to prevent re-abuse
- Local projects on your device are not affected
- Deletion is completed within 30 days
Note: The hashed device identifier in our trial abuse prevention database is retained even after account deletion. This is necessary to prevent users from creating new accounts to obtain additional trial periods. This data cannot be used to identify you personally as it contains only an irreversible hash.
8. Hardware Identifier Usage
8.1 Why We Collect It
Your Mac’s hardware identifier is used to:
- Prevent unauthorized license sharing across multiple devices
- Enable license transfer between your own devices
- Verify legitimate license usage
- Prevent trial abuse (one trial per physical device)
8.2 How It’s Protected
- Identifier is cryptographically hashed (SHA-256) before transmission
- Original hardware serial number is never transmitted or stored
- Hash is irreversible – we cannot determine your actual serial number
- Never shared with third parties
- Used solely for license verification and trial abuse prevention
8.3 Trial Abuse Prevention System
To ensure fair use of our 14-day trial:
- When you start a trial, your device’s hashed identifier is recorded
- If the same device attempts to start another trial (with any account), it will be denied
- This prevents creating multiple accounts to extend trial usage indefinitely
- This data is stored permanently and survives account deletion
- Only the hash and last 4 characters are stored – not your actual serial number
8.4 License Transfer
You can transfer your license to a new device:
- Deactivate license on current device (Profile > License Management)
- Log in on new device
- License automatically activates on new hardware
9. Cookies and Tracking
OdinoLabel does not use:
- Browser cookies
- Web beacons
- Advertising trackers
- Cross-app tracking
Anonymous usage analytics may be collected to improve app performance and features.
10. Children’s Privacy
- OdinoLabel has a 4+ age rating
- We do not knowingly collect data from children under 13
- If we discover such data, it will be promptly deleted
- Parents may contact us to request data deletion
11. International Data Transfers
| Data Type | Location |
|---|---|
| Account & license data | EU (Firebase europe-west1) |
| Trial abuse prevention data | EU (Firebase europe-west1) |
| Purchase data | Apple’s servers (per Apple’s privacy policy) |
| Projects | Your local device only |
For users outside the EU, data transfers are protected by:
- Standard Contractual Clauses
- Firebase’s compliance certifications
12. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data | Until account deletion + 30 days |
| License data | Duration of license + 1 year |
| Trial abuse prevention data | Permanent (hashed device ID only) |
| Purchase records | As required by tax law (typically 10 years) |
| Support communications | 2 years |
| Local projects | Until you delete them |
13. Third-Party Services
13.1 Google Firebase
- Purpose: Authentication, database, cloud functions
- Data processed: Account info, license data, trial abuse prevention
- Privacy Policy: https://firebase.google.com/support/privacy
13.2 Apple App Store / StoreKit
- Purpose: App distribution, payment processing
- Data processed: Purchase transactions, subscription status
- Privacy Policy: https://www.apple.com/legal/privacy/
14. Changes to This Privacy Policy
We may update this Privacy Policy periodically. Changes will be communicated through:
- In-app notifications for material changes
- Updated “Last Updated” date on this page
- Email notification for significant changes (if email provided)
Continued use after changes constitutes acceptance.
15. Contact Information
For privacy questions, data requests, or concerns:
Data Protection Contact:
Email: privacy@odinolabel.com
General Support:
Email: support@odinolabel.com
Website:
https://www.odinolabel.com
Address:
Beamy
Melegnano, 20077 MI
Italy
16. Summary
| What | Our Approach |
|---|---|
| Your projects | 100% local, never uploaded |
| Account data | Securely stored in EU |
| License verification | Periodic online check required |
| Hardware ID | Hashed, used only for license and trial protection |
| Trial abuse prevention | One trial per device, permanently tracked |
| Data sharing | Minimal, only for service operation |
| Your rights | Full GDPR compliance |
Last updated: December 19, 2025
Version: 4.1