Updated 20 October 2026
Privacy policy
This policy covers the Chlabs postal Shopify application and the separate browser extension Chlabs — CN23 Customs + CP72 Labels. Their data sources and submission paths differ as described below.
Shopify application
Chlabs Postal Matrix Print processes only the Shopify order and recipient information needed for the merchant's selected action. Direct postal printing uses the order reference, recipient name, postal address and phone number. The optional CN23 action also uses email, item description, quantity, declared value, weight, HS code, country of origin, and the returned La Poste declaration result.
How data is used
The app reads an order only when an authorized merchant opens an order action. For postal printing, the confirmed address is queued transiently in the app's authenticated Google Cloud service and retrieved by that shop's outbound Windows printer worker. For CN23, the reviewed declaration and configured notification email are sent through the same authenticated service to La Poste. Recipient data is not written to application logs and is not used for advertising, analytics, profiling, lending, or unrelated purposes. It is never sold.
Storage and retention
The sender profile, including an optional second email, calibration, and recent declaration results are stored in Shopify app-owned data associated with the merchant's app installation. A direct-print job is held in transient server memory: an uncollected job expires after 10 minutes, and completed, failed, or expired entries become eligible for removal after 24 hours and are removed during subsequent queue activity. A relay restart can clear transient jobs sooner. The local worker's duplicate-prevention journal stores only a one-way request hash for 24 hours, not the address. Order-specific declaration data is retained for up to 10 days so the merchant can download or regenerate the result, with at most 20 recent results during that window.
Sharing
Data is shared only with Shopify, as the platform hosting the app and its app-owned storage; Google Cloud, as the transient hosting provider; the merchant's authenticated Windows printer worker for direct printing; and La Poste only when the merchant chooses the CN23 action. No Chlabs advertising or analytics service receives order data.
Security and merchant control
The app uses Shopify-managed installation, short-lived signed Shopify ID tokens, direct Admin API access, and the minimum read_orders scope. The service validates token audience, signature, shop identity, payload size and field limits. Each printer worker has a dedicated shop token encrypted with Windows DPAPI. Mandatory privacy webhooks verify Shopify's HMAC before acknowledging data requests or deleting transient shop data. Merchants can remove the app to revoke its access. Requests about access, correction, deletion, or privacy can be sent to the support address below.
Browser extension — CN23 Customs + CP72 Labels
The browser extension reads supported Amazon Seller Central and Octopia/Cdiscount order pages opened by the signed-in merchant. Address-label printing uses order reference, recipient name, postal address and telephone numbers, selected label type, calibration, and configured sender details, including up to two sender email addresses. The Amazon CN23 workflow also uses visible item descriptions/prices and seller-reviewed quantity, declared value, weight, HS code, origin country, notification email, and returned declaration results.
Opening or switching a review does not print or create a declaration. After explicit confirmation, browser-extension CN23 data is sent directly to La Poste at cn23.laposte.fr; a guided official-form fallback is available. This differs from the authenticated-service path used by the Shopify CN23 action.
Confirmed CP72/France print payloads go to the fixed authenticated Chlabs Google Cloud relay at cn23-shopify-bridge-1068150044836.europe-west1.run.app for the configured shop, then to its separately installed paired Windows Epson worker. Sender fields can be included in that payload even when sender printing is disabled. Address printing does not require the CN23 website or purchase postage; browser-extension CN23 does not require the printer bridge.
Browser-extension storage and migration
Sender profiles, calibration, item defaults, and printer pairing remain in the browser profile's local extension storage until changed or removed. CN23 reviewed snapshots, codes, barcode images, PDFs, and up to five declaration versions per order expire after 10 days and are pruned during subsequent extension/browser activity. Frozen print requests include the exact reviewed address payload to support safe retries; they expire after 23 hours and are cleaned during subsequent relevant extension activity.
The Store package contains no merchant pairing secret. A pairing token entered or imported through extension settings authenticates only the fixed relay/configured shop. A legacy Matrix profile export is created only at the user's request and contains a private pairing credential and settings. Protect that JSON file and delete it after successful import and verification. Import does not submit a print job or send the file to an external service. Updating the same Store item preserves its CN23 local settings and unexpired history; storage belonging to a different legacy extension is not read automatically.
Browser-extension sharing and controls
Confirmed declaration data is shared with La Poste; confirmed print data is shared with Google Cloud's hosted relay and the authorized Windows printer worker. The extension does not collect marketplace passwords or browser cookies, and does not use data for advertising, analytics, sale, or unrelated profiling. Account authentication remains in the marketplace's own browser session. These providers and the merchant's workstation also have their own data-handling policies.
For the Chrome Web Store User Data Policy, extension data is used only to provide or improve these disclosed, user-requested postal features. Transfers are limited to the services needed to complete the merchant-confirmed La Poste submission or label print. Data is not sold, used for advertising, or handled for unrelated purposes; Chlabs does not permit human reading of extension data except where the user consents for support or where necessary for security or legal compliance.
Relay print-job retention and the worker's request-hash journal are described above. Windows printer-driver and spooler data is separate from the journal and remains subject to workstation settings. Removing the browser extension or clearing its local storage removes local settings/history and pairing, but does not automatically cancel jobs already sent to the relay or spooler, uninstall the Windows bridge, or remove the Shopify app. Contact support about access, correction, deletion, or pairing revocation.
Contact
Email: cheaply.fr@gmail.com