Last updated 21 July 2026
This policy explains what Easy-Post Desktop stores, what it transmits and to whom. The data controller is Spencer Fields, a sole trader established in the United Kingdom, contactable at Apps@spencerfields.com.
Shipping data stays on your own computer. The application contains no analytics, no telemetry, no advertising identifiers and no crash reporting. The Supplier receives exactly one thing from the application, once: a record that a given computer is using one of the places your licence covers, described in full below. Nothing about what you ship, or how you use the application, is ever transmitted.
None of this is synchronised, backed up or uploaded anywhere by the application. Removing the application and its data directory removes it all.
Each licence covers a set number of computers, so something has to count them. Activation records that this computer is using one of those places. It happens once: the service returns a signed confirmation which is stored on your machine and checked from then on without any network connection. There is no periodic check-in, no heartbeat and no usage reporting.
What is sent. A one-way fingerprint of the computer, produced by combining a machine identifier with your licence key; the identifier itself never leaves your computer and the fingerprint cannot be reversed to recover it. Because your licence key forms part of that calculation, the same computer under a different licence produces an unrelated value, so activations cannot be linked between customers. Alongside it: a name for the computer taken from its hostname, so you can tell your own machines apart when releasing one; the order reference contained in your licence key; and the date.
What is never sent. Your EasyPost API keys, your addresses, your shipments, your tracking or customs data, any file you open, or anything at all about how you use the application.
How long it is kept. For as long as the licence is in use. Releasing a computer deletes its record straight away. A computer that has not activated for six months is deleted automatically. Refunding a purchase deletes every record for it.
If the service is unavailable. The application carries on working. It allows itself a limited grace period and tries again later. An outage on our side must never stop software you have paid for from running.
Purchases are handled by Paddle.com Market Ltd, our authorised reseller and Merchant of Record. Payment details are collected and processed entirely by Paddle. The Supplier never sees, receives or stores card numbers or bank details.
Paddle passes the Supplier the purchaser's email address and the order reference, which are used to generate and send the licence key. Paddle's handling of personal data is governed by its own privacy notice.
The licence key email is delivered through Resend, an email delivery provider, which processes the recipient address for that purpose alone.
Purchaser email addresses and order references are retained for as long as necessary to support the licence and to meet accounting obligations. They are never sold, rented or used for marketing.
These pages set no cookies until you choose to allow them, and there are no visitor accounts.
Analytics. The site uses two analytics services, and nothing analytics-related loads unless you accept the choice shown on your first visit. Decline and no analytics cookies are set and nothing is sent to either provider. You can change your mind at any time by clearing this site's data in your browser, which brings the choice back.
Google Analytics reports, in aggregate, how the site is used. If you accept, it sets its own cookies and receives usage data including a shortened IP address. Google acts as a separate processor and its handling is governed by its own privacy policy.
Microsoft Clarity shows which parts of a page people read and where they get stuck. It goes further than aggregate counting: it records how pages are scrolled and clicked during a visit and replays those interactions, and it sets its own cookies to tell one visit from the next. Anything typed into a form field or chosen from a drop-down is masked before it leaves your browser: Clarity masks these in every mode it offers and provides no way to switch that off. On the setting in use here, numbers and email addresses appearing anywhere on the page are masked as well. Microsoft acts as a separate processor and its handling is governed by the Microsoft privacy statement. Because a recording of a visit is not aggregate information, this is not something that can be run without asking — which is why the choice is offered rather than assumed.
Fonts and logs. Web fonts are loaded from Google Fonts, which receives the requesting IP address as an ordinary consequence of serving the font files. Standard server access logs are kept by the hosting provider for security and diagnostic purposes.
Email or telephone contact for support or a refund is retained only for as long as needed to deal with the matter and to keep a record of it.
The contact form on the support section collects the name, email address, chosen topic and message you enter, together with the IP address the submission came from. The message is emailed straight to the support mailbox and is not stored in any database. The IP address is recorded in the email and held briefly in a temporary rate-limiting file, purely to stop the form being abused to send bulk mail; it is not used to identify or profile anyone. No form-analytics service, tracking pixel or third-party form provider is involved — the form is handled entirely on this server.
Under the UK General Data Protection Regulation and equivalent laws, you may request access to the personal data held about you, ask for it to be corrected or erased, object to its processing, or request a copy in portable form. Write to Apps@spencerfields.com and the request will be answered within one month.
Data held about a purchase is limited to the email address, order reference and licence key. Shipping data is not held by the Supplier at all, so a request concerning it should be directed to EasyPost.
A complaint may be raised with the UK Information Commissioner's Office at ico.org.uk.
Easy-Post Desktop is a business tool and is not directed at children. Personal data is not knowingly collected from anyone under sixteen.
This policy may be updated from time to time. Material changes will be reflected in the "last updated" date above.
