Privacy

Last updated 11 September 2026

Draft. These pages are not final: the company name, registered address and governing law still have to be filled in, and a lawyer should read them before anyone relies on them.

This explains what we collect, why, and how long we keep it. The short version: we hold the account details you give us and the catalogue you build, and a scan of one of your codes is recorded without ever storing the scanner’s IP address.

What you give us

To open an account we store your name, email address and a hashed password. We never hold the password itself. If you sign in, we store a session so you stay signed in.

Inside an account we store what you put there: your organisation name, the people you add to it and their roles, your products and their GTINs, the links each code resolves to, any custom domains you connect, and your branding. This is your data. You can export it and you can delete it.

What a scan records

When somebody scans one of your codes, we record the scan so you can see it in your analytics. That record contains the time, the GTIN, whether the code carried a lot or serial number, which of your links it resolved to, the outcome, and the country and region, device class (mobile, tablet, desktop or bot) and operating system family of whoever scanned it.

We do not store the scanner’s IP address. To count a person once rather than five times, the resolver takes their IP address and user agent, combines them with the current date, and hashes the result at the edge. Only that hash is sent onward, where it is salted again before it is stored. The raw address never leaves Cloudflare’s network and is never written down. Because the date is part of the input, the same person scanning tomorrow produces a different hash, and once the salt is rotated the old hashes cannot be tied to anything at all.

People who scan your codes never see a cookie from us and are never asked to identify themselves. A scan is a redirect, not a sign-in.

How long we keep it

Individual scan records are kept for as long as your plan entitles you to look at them — from 30 days on Free to 730 days on Enterprise — and are then deleted. Daily totals, which identify nobody, are kept longer so year-on-year comparisons survive.

Account and catalogue data is kept until you delete it or close your account. When you close an account we delete it and its data; backups age out on their own cycle.

Cookies

This marketing site sets no cookies at all and runs no analytics or advertising scripts. It is a static site that reads nothing about you.

The portal at app.itemmark.com sets one cookie, which keeps you signed in. It is not used for tracking and there is no way to turn it off and still be signed in.

Who else sees it

We do not sell your data, and we do not share it for anyone else’s advertising. We rely on a small number of suppliers to run the service:

• Cloudflare (opens in a new tab) — DNS, certificates and the resolver that answers every scan.
• Amazon Web Services (opens in a new tab) — sends the few emails we send, such as a password reset.

We will hand data to authorities only where the law actually requires it, and we will tell you unless we are forbidden from doing so.

What you can ask for

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Most of it you can do yourself from the portal without asking. For anything else, use the contact form and we will answer within 30 days.

If you do not have an account and cannot use the form, write to us: REPLACE_ME — registered address. We will answer a request that arrives that way on the same terms.

Changes

If we change this in a way that matters, we will say so on this page and change the date at the top. Questions go through the contact form.