Privacy Policy

1. Who we are

Plain Barcode (plainbarcode.com) is operated by Toma Tomov, an individual located in the State of Georgia, United States (“we”, “us”). For any privacy question or request, email [email protected].

2. What we collect and why

Messages you send us

If you email us, directly or through the contact form (which only opens your own email app), we receive your email address, your name if you include it, and your message. We use them only to answer you and to keep a record of corrections and requests.

Server logs

Like most websites, our server automatically records each request: IP address, date and time, the page requested, the referring page, your browser's user-agent string and the response status. We use these logs to keep the site running, investigate errors and block abuse. They are deleted automatically after 14 days.

Content delivery and security (Cloudflare)

The site is delivered through Cloudflare, which processes IP addresses and request data to deliver pages quickly and protect the site from attacks. Cloudflare may set a strictly necessary security cookie when it needs to tell people from bots. See Cloudflare's privacy policy.

Approximate country, to apply the right privacy rules

On pages that can show ads, your browser asks our content delivery network which country your request comes from (derived from your IP address). We use the answer only to decide whether consent is required before ads load. We do not store it.

Tools

The barcode generator, QR code generator, label sheet tool, SKU generator and check digit calculator run entirely in your browser. What you type, including Wi-Fi passwords in the QR code generator, is not transmitted to us or stored by us. When you send a SKU list to the label sheet tool, it is passed through your browser's session storage and deleted when it is used.

Cookies, advertising identifiers and similar technologies

We do not set cookies for analytics or tracking. Our advertising partner, Google, uses cookies and advertising identifiers as described in section 3. Details are in the Cookie Policy.

What we do not collect

We have no user accounts, newsletters, comments or payment forms. We do not use analytics services at present. If that changes, this policy will be updated first and consent will be requested where the law requires it.

3. Advertising by Google AdSense

We use Google AdSense (publisher ID pub-6552764071336126) to show ads. Specifically:

• Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet.
• You may opt out of personalized advertising by visiting Google Ads Settings.
• You can opt out of a third-party vendor's use of cookies for personalized advertising at www.aboutads.info and, for visitors in Europe, www.youronlinechoices.eu.
• Google explains how it uses data in How Google uses information from sites or apps that use our services.

Even when ads are not personalized, Google may use cookies or identifiers for frequency capping, aggregated ad reporting, and to combat fraud and abuse.

We do not send Google any information that Google could use to identify you personally, such as your name, email address or phone number. None of our page addresses contain personal information.

When ads load

• EEA, United Kingdom and Switzerland: ads, and the cookies that come with them, load only after you make a choice in a Google-certified consent management platform that uses the IAB Transparency & Consent Framework. Until such a platform is active on this site, no ads are shown to visitors from these regions.
• United States and elsewhere: before ads load, the site checks whether you have opted out of sale or sharing (see section 8) or your browser sends a Global Privacy Control signal. If so, ads are requested in Google's restricted data processing mode, which serves only non-personalized ads.

4. Legal bases (EEA, UK and Switzerland)

We process server logs and security data on the basis of our legitimate interest in running a secure, working website. We handle your emails to respond to your request. Advertising cookies and personalized ads rely on your consent, which you can withdraw at any time through the consent tool's privacy settings.

5. Who we share information with

• Hosting: Hetzner Online GmbH, which runs our server in Nuremberg, Germany.
• Content delivery and security: Cloudflare, Inc.
• Email: our mailbox is hosted by GMX, so messages you send us are stored by that provider.
• Advertising: Google and its advertising partners, as described in section 3.
• Legal reasons: when the law requires it, or to protect the rights and safety of users or the site.

We do not sell personal information for money.

6. How long we keep information

• Server access logs: 14 days, then deleted automatically.
• Emails: as long as needed to handle your message and any follow-up, and no longer than 24 months after our last exchange, unless we need to keep a record of a legal request such as a copyright notice.
• Advertising data held by Google: under Google's own retention policies. Your choices stored in your browser stay until you clear them.

7. Your choices and rights

Wherever you live, you can ask us to tell you what personal information we hold about you, to correct it, or to delete it. Email [email protected]. We may ask you to confirm the request from the email address involved, so that we don't disclose or delete someone else's information. We answer within one month, or within the period the law that applies to you allows.

If you are in the EEA, the UK or Switzerland, you also have the right to restrict or object to processing, to data portability, to withdraw consent at any time, and to complain to your local data protection authority.

For ads specifically, use Google Ads Settings, the opt-out pages listed in section 3, or your browser's cookie settings.

8. California privacy rights (CCPA/CPRA) and other US states

This section applies to California residents and describes our practices over the last 12 months. Whether or not these laws apply to a site of this size, we honor the requests described here from any US visitor.

Categories of personal information we collect

We do not collect sensitive personal information as defined by California law.

Selling and sharing

We do not sell personal information for money. However, when Google and its partners show ads, identifiers and internet activity are disclosed to them for cross-context behavioral advertising. Under California law, that can be considered “sharing” of personal information, and in some interpretations a “sale”. We do not knowingly sell or share the personal information of consumers under 16.

Your rights

• Right to know what personal information we collected about you, its sources, purposes and the categories of recipients.
• Right to delete personal information we collected from you.
• Right to correct inaccurate personal information.
• Right to opt out of the sale or sharing of your personal information.
• Right to non-discrimination. We will not deny you service, charge you differently or give you a different quality of service because you used any of these rights.

How to make a request

• To opt out of sale or sharing in this browser, use the Do Not Sell or Share My Personal Information page. We also treat a Global Privacy Control signal from your browser as an opt-out.
• For any other request, email [email protected] with the subject “California privacy request” (or the name of your state). We will confirm receipt within 10 business days and respond within 45 days, or tell you if we need up to 45 more days.
• Authorized agents: an authorized agent may submit a request for you if they provide your signed written permission, and we may ask you to confirm your identity with us directly.

Residents of other US states with consumer privacy laws can use the same email address for the same requests. If we decline a request, you may appeal by replying to our decision, and we will review it and answer in writing.

9. Children

Plain Barcode is a general-audience site for business users. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13 (COPPA). If you believe a child has sent us personal information, email [email protected] and we will delete it.

10. Security and international transfers

The site is served only over HTTPS, and we keep the information we hold to a minimum. Our server is in Germany and some of our providers are in the United States, so information may be processed outside the country where you live.

11. Changes to this policy

If we change this policy, we will update the date at the top of this page. Significant changes will be noted on the home page for at least 30 days.

12. Contact

Toma Tomov, Georgia, United States. Email: [email protected].