Privacy Policy
Last updated: 29 May 2026
This Privacy Policy explains how ShipStamp (“ShipStamp”, “we”, “us”), operated by Wyn Brothers, handles information when you use the ShipStamp desktop application (the “App”) and the ShipStamp website (the “Site”). ShipStamp is a desktop application that helps you find and print the shipping labels contained in your marketplace sale emails.
1. Information the App accesses
To do its job, ShipStamp connects to the email account(s) you choose to link, using the official, secure sign-in flows provided by Google and Microsoft. With your permission, the App accesses:
- Email messages and attachments that match shipping-label senders (for example, Vinted and eBay), in order to locate and extract the shipping-label PDF or image for each order. The App requests read-only access — it cannot send, delete, or modify your email.
- Your email address and basic profile (name and profile picture), used only to label the connected account inside the App.
Google account data
When you connect a Google account, ShipStamp requests these scopes:
gmail.readonly— read-only access to find label emails and download their attachments.userinfo.emailanduserinfo.profile— your address and name so the App can show which account is connected.
Microsoft account data
When you connect a Microsoft (Outlook, Hotmail, Live, or Microsoft 365) account, ShipStamp requests Mail.Read (read-only mail), User.Read (your basic profile), and offline_access (to keep you signed in without re-entering your password).
2. How we use that information
ShipStamp uses the data it accesses for one purpose only: to provide the App's user-facing features — finding your shipping labels, organising them by courier and marketplace, and printing them. Processing happens locally on your device.
3. Where your data is stored
All email content, shipping labels, and related data that ShipStamp processes are stored locally on your own device, in your user profile. ShipStamp does not transmit your email content, attachments, or label data to our servers or to any third party. The App communicates only with Google's and Microsoft's own services to read your mail, and (if you choose) with your printer.
4. What we never do
- We never sell, rent, or transfer your email content or personal data to third parties, including advertisers, data brokers, or resellers.
- We never use your email data for advertising, retargeting, or building advertising profiles.
- We never use your data to assess credit-worthiness or for lending decisions.
- We do not allow humans to read your email data, except where you explicitly ask us to (for example, to help with a support issue), where required for security, or where required by law.
- We do not use your email data to train generalised artificial-intelligence or machine-learning models.
5. Authentication tokens
When you connect an account, Google or Microsoft issues ShipStamp a secure access/refresh token so it can read your mail without storing your password. These tokens are kept only on your device, protected using your operating system's secure storage. You can revoke them at any time (see “Your choices” below), and signing out of the App deletes them.
6. The website & waitlist
If you join our waitlist on the Site, we collect the email address you provide. We use it only to contact you about ShipStamp (for example, to tell you when it launches). We do not sell or share it, and you can ask us to remove it at any time by emailing support@shipstamp.co.uk. This waitlist data is entirely separate from, and unrelated to, any data accessed through your Google or Microsoft account.
7. Sharing and third parties
We do not share your personal data with third parties for their own purposes. The only external services involved in running ShipStamp are:
- Google and Microsoft — the providers of the mailboxes you connect.
- Our email/payment providers — used solely to send you waitlist or account emails and (in future) to process subscription payments. These providers never receive your email content.
8. Data retention & deletion
Because your email and label data live on your device, you are in control of it:
- Clear cache in the App removes downloaded labels.
- Sign out deletes your stored tokens and cached labels.
- Uninstalling ShipStamp, or using Factory Reset in settings, removes all locally stored data.
To remove your waitlist email from our records, email support@shipstamp.co.uk.
9. Your choices
You can revoke ShipStamp's access to your accounts at any time, independently of the App:
- Google: myaccount.google.com/permissions
- Microsoft: account.microsoft.com → privacy / app access
10. Security
ShipStamp uses the official OAuth sign-in flows from Google and Microsoft, stores authentication tokens in your operating system's protected storage, and keeps your data on your device. No method of storage is perfectly secure, but because your email content is never sent to or held by us, there is no central database of your mail to breach.
11. Children
ShipStamp is intended for adults running a selling or shipping activity and is not directed at children under 16. We do not knowingly collect data from children.
12. Changes to this policy
We may update this policy from time to time. We will post the revised version here and update the “Last updated” date above. Significant changes affecting how we use your data will be communicated to connected users.
13. Contact us
Questions about this policy or your data? Email support@shipstamp.co.uk. ShipStamp is operated by Wyn Brothers, United Kingdom.