Privacy Policy

For each dynamic QR code we store the destination URLs, routing rules and styling you configure. For each scan we store an approximate country/region, the device type and operating system reported by the browser, the referring page, and a salted hash of the IP address.

We never store raw IP addresses, and we do not profile individual people or sell scan data. The IP hash uses a secret salt and cannot be reversed into an address.

Deleting a QR code removes it, its rules and all of its scan history. Static QR codes you download contain no service dependency and no tracking.

To run an account we store your email address and a securely hashed password. We do not ask for a name, address or payment details to use the free plan.

We set one essential cookie: a session token that keeps you signed in. It is httpOnly and cannot be read by scripts on the page. Without it you cannot stay logged in.

We also store your cookie choice itself in a small preference cookie, so the banner does not ask again on every visit. You can change or withdraw that choice at any time from the Cookies link in the footer.

We also use analytics, to see which pages and features actually get used. It is optional: nothing loads until you allow Analytics in the cookie banner, and you can change your mind at any time from the Cookies link in the footer. We do not run advertising, remarketing or cross-site tracking cookies.

Scan records are kept while the code exists so your reporting stays useful. Deleting a code deletes its scans. Closing an account removes the account and everything attached to it.

You can access, correct or delete the data attached to your account at any time from the dashboard, and you can ask us to export it. Because we hold so little personal data, most requests are answered immediately.

If this policy changes in a way that affects what we collect, we will note it on this page and, for significant changes, in the product changelog.