Privacy Policy

Last updated: September 12, 2026.

This policy covers both the Croplet iOS app and the Croplet web tool. It explains what is processed locally, when data may pass through third-party services or Croplet infrastructure, and what that means for your privacy. The iOS app uses PostHog for product analytics and error monitoring, and RevenueCat to operate Croplet Pro purchases and entitlements.

Information Croplet processes

• The PDF files and contents you import into the Croplet iOS app or upload directly into the Croplet web tool.
• Recognized text and barcode data needed to detect, crop, preview, and export labels.
• Settings you choose, such as export format, DPI, and label preferences, which are stored locally on your device or in your browser.
• The remote URL you submit for web-tool URL import, and the fetched file contents needed to retrieve that document for your browser.
• Operational URL-import logs, including the endpoint name, event name, remote hostname, protocol, detected file extension, response content type, response byte size, and the reason for blocked or failed requests. For rate-limited requests, the log also includes the client IP address seen by the server.
• Purchase and entitlement status returned by Apple if you buy or restore Croplet Pro in the iOS app.
• Limited product-usage events, app lifecycle and screen-view data, technical app/device information, network information such as an IP address, and error diagnostics collected by PostHog in the iOS app. Events can describe actions such as importing, processing, sharing, or printing a label, or viewing and purchasing Croplet Pro. PostHog uses an anonymous or pseudonymous identifier to connect events from the same app installation. We do not intentionally include PDF files, label contents, OCR text, barcode data, or recipient names in these events.
• RevenueCat data needed to show products, process purchases, validate Apple transactions, and maintain entitlement status. This may include an anonymous app-user identifier, purchase history, Apple receipt or transaction information, and technical app/device information. We do not provide RevenueCat with your name or email address through the app.
• Information you choose to include if you contact support, report a bug, or request a feature by email.

How information is used

• To crop, optimize, preview, and export shipping labels in the iOS app and web tool.
• To remember your preferences between sessions on your device or in your browser.
• To fetch a PDF from a remote source when you choose the web tool's URL import feature.
• To unlock and restore paid features through Apple's billing systems in the iOS app.
• To understand how the iOS app is used, improve its features and performance, and monitor crashes and other errors through PostHog.
• To display available Croplet Pro products, validate purchases, and maintain subscription or lifetime entitlement status through RevenueCat and Apple.
• To respond to support requests, bug reports, or feature requests that you send by email.

What Croplet does not do

• The Croplet iOS app does not send your imported shipping labels to a Croplet-operated server for processing.
• The Croplet web tool does not upload local-file imports to a Croplet-operated server for processing as part of normal in-browser editing.
• The Croplet web tool URL-import feature is the exception: the remote file is proxied through a Croplet-operated server so the browser can receive it.
• The iOS app may transmit limited analytics, technical, diagnostic, and purchase data to PostHog, RevenueCat, and Apple. It does not intentionally transmit imported label files or their contents to PostHog or RevenueCat.
• Croplet does not require an account.
• Croplet does not show third-party advertising.
• Croplet does not sell personal information or use analytics for targeted advertising.

Third parties

• Apple processes in-app purchases, subscription management, transaction verification, and related App Store services for the Croplet iOS app under Apple's own policies: Apple Privacy Policy.
• RevenueCat provides the in-app purchase and subscription infrastructure used by the Croplet iOS app. It may process an anonymous app-user identifier, purchase history, Apple receipt or transaction information, and technical metadata to validate purchases and manage entitlements. RevenueCat does not receive payment-card details from the app. See the RevenueCat Privacy Policy.
• PostHog provides product analytics and error monitoring for the Croplet iOS app. It may process the anonymous or pseudonymous identifier generated by its SDK, app/device technical information, app lifecycle and screen-view events, custom feature-usage events, network information such as an IP address, and error diagnostics. We do not intentionally send imported label files or their contents to PostHog. The app uses PostHog's EU hosting endpoint. See the PostHog Privacy Policy.
• Netlify hosts the Croplet web tool and may process standard hosting, networking, and operational logs when you use the site. Netlify function logs are retained for 24 hours: Netlify Privacy Statement.
• If you use URL import in the web tool, the remote file host you specify will also receive a request for that file through Croplet's server-side proxy.
• If you use the email actions inside Croplet, your mail provider will also process the email you send.

Data retention

Imported documents and exported files remain under your control on your device and in locations you choose to save or share them. For web-tool URL imports, the requested file passes through a server-side proxy operated by Croplet and hosted by Netlify only to fulfill that request, and is not intentionally stored as part of the feature's normal operation. The full submitted URL, URL query string, and PDF contents are not intentionally written to application logs. URL-import function logs are retained by Netlify for 24 hours. If you want full privacy, use a local-file import instead: download the PDF first, then import it from Files or drag and drop. Other label platforms can have the same browser-access limitation, so local import is the safest option when you want everything to stay on your device. Support emails are retained for as long as reasonably necessary to respond, troubleshoot issues, and keep a record of product feedback. PostHog, RevenueCat, and Apple may retain analytics, diagnostic, purchase, and entitlement data under their own policies and service configurations. We do not control those third-party retention periods; see the linked policies above.

Your choices

• You can remove app data by deleting the app and its local documents from your device.
• You can use local-file import instead of URL import in the web tool if you want your document handling to remain entirely in your browser. Download the PDF first, then import it from Files or drag and drop.
• You can manage or cancel subscriptions through your Apple account settings.
• You can contact us with questions about analytics or purchase data, or to request access or deletion where applicable. Because PostHog and RevenueCat use anonymous or pseudonymous identifiers, we may need additional information to locate a specific record.
• You can decide what information to include before sending an email from the app.

Contact

For privacy questions about Croplet, contact:

• Name: Umberto Ragone
• Email: umberto@ragone.dev