Privacy Policy

What we collect

Account data (email), the QR codes and destinations you create, and billing details processed by Stripe (we never store card numbers).

Scan analytics

When a code is scanned we record a timestamp, coarse location (country/city from network headers), device/OS/browser, and referrer. We do not store raw IP addresses or full user-agents — uniqueness is derived from a daily-salted hash, so individual visitors can't be re-identified.

Product analytics

When enabled, we use PostHog in the US to understand which app pages and features are used, including signup, QR creation, free downloads and checkout requests. Analytics uses a random in-memory identifier that resets on a full page load. We do not link it to your account or send your email, QR content, payment details, URL query strings or fragments. Session recordings and automatic form capture are disabled. Hosted QR pages and scan redirects do not run the PostHog browser SDK. Our server reports limited event counts for billing, trial status, QR management, scans and account actions. These events use a fresh random identifier per event and include confirmed payment amounts and currency but exclude account and visitor identifiers, card details, QR content, destination URLs, IP addresses, location and referrers. PostHog receives network requests; IP-based location enrichment is disabled.

When configured, Google Analytics measures visits to our app and marketing pages. It uses browser cookies with a 90-day expiry to recognize returning browsers. We send page paths with account resource IDs removed and referrer origins without their paths or query strings. We do not send account names, emails, form contents, QR content or payment details to Google Analytics. Google receives network requests and browser/device information. Google Signals and advertising personalization are disabled for this tracker. The analytics preference below, Do Not Track and Global Privacy Control also apply to Google Analytics.

When your browser starts a free QR download, we record the time and QR type against your account so we can count downloads separately from saved QR codes. We do not store the downloaded content in this record, and account deletion removes it. Unless analytics is opted out, we also queue a minimal download event for PostHog and Google Analytics using a random event identifier rather than your account ID. These provider events measure downloads, not identified customers.

How we use it

To operate the service, show you analytics, process billing, and send account/lifecycle emails. We don't sell your data.

Subprocessors

Supabase (database/auth), Vercel (hosting), Upstash (cache/queue), Stripe (payments), PostHog (product analytics), Google (website analytics and advertising), and an email provider.

Your rights & contact

Request access or deletion of your data at [email protected]. Deleting a QR retains its analytics history; deleting your account removes your data.