Privacy Policy

DG form generation is in development and document uploads are currently disabled. The document provisions below cover previously submitted materials and future use after the feature opens.

1. What We Collect

To produce a DG form you may upload or enter: power of attorney (shipper/consignee names, addresses, contacts), MSDS / SDS, product name and UN number, packaging and quantity, contact person and phone number.

2. Purpose Limitation (Important)

Documents you upload — power of attorney, MSDS and related business materials — are used solely to generate your DG form and related lookups, and for no other purpose. They are not used for advertising or profiling, and are never sold, rented or exchanged with third parties.

Disclosure to third parties occurs only where necessary to perform your instructed task (carrier, terminal or declaration system), or where required by law or a competent authority.

3. Retention

Uploaded documents are retained for 30 days from the date the DG form is generated, after which they are automatically deleted from the server. Deletion is irreversible; please re-upload if still needed.

Account registration data (username, email, contact) is kept until you close the account, for login and quota management. You may request deletion of the account and all associated data at any time.

4. Security

Data is transmitted over encrypted channels and stored on access-restricted servers accessible only to authorised personnel. We apply technical and organisational measures appropriate to the risk.

5. Your Rights

You may request access, correction, supplementation or deletion of your data, and may withdraw consent previously given. We will act within a reasonable period.

6. Cookies and Browser Local Storage

We use no third-party tracking cookies, no cross-site tracking and no advertising. We use only the following first-party storage, to maintain login state and interface preferences:

• wb_token — login credential (a random string, never the plain-text password), to keep you signed in;
• wb_lang / wb_theme / wb_version — language, light/dark theme and rule-version preferences;
• imdgseek_history — up to 20 UN numbers you recently searched on this device, stored only in your own browser for the “Recent” shortcut on the home page. It is never uploaded to the server, and you can erase it at any time via “Clear”.
• imdg_sid — session identifier (HttpOnly, 30 days) for session continuity and abuse prevention;
• imdgseek_sub_done — records whether you dismissed the subscription prompt, so it is not shown again.

7. Website analytics

Our own servers measure pageviews, rule-query requests, popular pages, referring websites, language, device category and country/region to improve the free reference service.

The traffic database does not store raw IPs, full browser identifiers, accounts, input contents or business files. IPs are used in memory to look up a local country database and create a salted visitor estimate that changes daily. Visitor IPs are not sent to an external geolocation service. Referrers contain only website hostnames, without paths or query strings.

This traffic reporting sets no visitor tracking identifiers. A site owner can exclude this browser using a non-identifying __Host-imdg_analytics_exclude preference cookie lasting up to 180 days, including after signing out. Untick the preference or clear cookies to resume; history is retained. Fixed query outcomes (results, no results, errors and daily-limit blocks) are counted without storing entered search text in the traffic database. New traffic collection is skipped when the browser sends DNT or Global Privacy Control. Unavailable locations remain unknown; VPNs may show the exit location. Visitor estimates are not exact people counts.

Traffic records are retained for 90 days and automatically expire. New reports start when enabled; uncollected historical locations are not reconstructed. Earlier query logs remain limited to query volume, content gaps and abuse analysis, with IPs protected by the existing hashing mechanism; they are not used for advertising or shared externally. Clearing browser storage does not erase existing server-side statistics.

Country data uses IP Geolocation by DB-IP (CC BY 4.0), queried locally.

Account verification and service email

Registration requires a username, email and password, and proof of email ownership. Contact name and phone are optional. Passwords are salted and hashed. Codes expire after 10 minutes, are single-use and are excluded from traffic analytics.

Alibaba Cloud DirectMail delivers verification, password recovery and necessary account messages and processes the recipient address and message for delivery. The site owner receives the account name, email, time and relevant application ID after registration or a company-verification application, for account administration and manual review.

Abuse counters retain keyed hashes of email and IP for up to 24 hours. Queue bodies and recipients are cleared after delivery or expiry; delivery status is retained for up to 30 days. Expired code records are cleared after 24 hours; verification status is retained with the account.

Website feedback

When you submit feedback, we store the category, description, relevant field, UN number, edition, selected entry and optional reply email to reproduce issues, check sources and respond. No account is required. Do not include customer or shipment details. Attachments are not accepted.

Only the site owner can view submissions. They are stored for up to 365 days. Owner notes stay in the inbox and are not emailed automatically. Submission identifiers, timestamps and a keyed hash of the IP address are stored to prevent duplicates and abuse; the original IP is not stored. Use your reference number when contacting support@imdgseek.com to request access or deletion.