Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account information: name, email address, and profile image provided through our authentication provider (Clerk) when you sign in with an email address or a third-party account.
• QR code data (signed-in users): the content you encode in your QR codes and the customization settings, stored so you can find and download them again in your dashboard. QR codes made without an account are not stored.
• Scan analytics (Tracked QR codes only): a truncated IP address, approximate location (country and city, when the network provides it), device type, operating system, browser, referrer, and timestamp of each scan.
• Usage counters: an anonymous record of the QR code type each time a code is downloaded. It contains no content and no account identifier.

2. How We Use Your Information

• To provide and maintain the Service
• To manage your account
• To provide scan analytics for Tracked QR codes
• To improve the Service and develop new features
• To prevent abuse and enforce our Terms of Service

Account emails such as sign-in verification are sent by our authentication provider on our behalf.

3. Direct vs Tracked QR Codes

Direct QR codes encode your content directly in the QR image. No data passes through our servers when these codes are scanned. We have no visibility into Direct QR code usage.

Tracked QR codes redirect through our servers, which allows us to record scan data. This data is used solely to provide scan analytics to the QR code owner. The IP address is truncated before it is stored (the last part of the address is removed), so a scan cannot be linked to a single device.

4. Data Sharing

We do not sell your personal information. We share data only with:

• Service providers: Clerk (authentication), our hosting and database providers, and, when enabled, Upstash (request rate limiting, which processes a truncated form of your IP address)
• Legal requirements: when required by law or to protect our rights

5. Data Retention

Account data, QR codes, and scan analytics are retained for as long as your account exists. When you delete your account, your account record, your QR codes, and their scan data are deleted. Tracked QR codes stop working at that point. Anonymous usage counters contain no personal data and are kept.

6. Security

Data is encrypted in transit (TLS). Authentication is handled by Clerk; we never see or store your password. However, no method of transmission over the Internet is 100% secure.

7. Your Rights

You have the right to:

• Access, update, or delete your account from the dashboard settings page
• Delete individual QR codes and their scan data from your dashboard
• Request a copy of the data we hold about you

8. Cookies

We use only essential cookies, set by Clerk, for authentication and session management. We do not use advertising or third-party analytics cookies. You can control cookies through your browser settings.

9. Contact

For privacy-related inquiries, contact us at [email protected].