Privacy policy
What we collect, why we collect it, and what you can do about it — in plain words.
Last updated
The short version
- We collect what we need to run your account and your codes: your email address, your codes and the files you add to them.
- When someone scans a code, we record when, roughly where (down to the city) and on what kind of device. We never store their IP address or who they are.
- We don’t sell your data and we don’t use advertising trackers. Our website analytics run without cookies.
- Payments go through Stripe. We never see or store your card number.
Who we are
yourqrcode.com (“we”, “us”) runs this website and the QR code service on it, and is responsible for the personal data described here. For any question or request about your data, email support@yourqrcode.com.
What we collect
- Your account: your email address and, if you add them, your name and a password. Passwords are stored only as a secure hash. Sign-in codes are stored only as a hash and expire after 10 minutes.
- Your codes: what each code opens (for example a link, a message, contact details, or a Wi-Fi network name and password), its name and design, and any files you upload, such as a PDF, photos or a logo.
- Payments: Stripe handles your card. We keep your Stripe customer number and the status and dates of your plan, so we know whether you have access.
- Emails: a record of the emails we sent you — such as sign-in codes, your QR code or receipts — and whether they were delivered.
- Website use: which pages and steps are used, so we can improve them. This runs without cookies and never includes the content of your codes or links. Once you sign in, these events are linked to your account.
- Errors: technical reports when something breaks, with email addresses, code contents and links removed.
When someone scans a code
Scans of saved codes pass through a short link on yourqrcode.com. For each scan we record:
- the date and time;
- the approximate location — country, region and city — worked out from the network;
- the type of device, its operating system and browser, and its language setting;
- the website the scan came from, if there was one (the site name only).
We do not store the IP address. We use it for a moment, together with browser details, the date and a secret key, to make a one-way code that lets us count unique scans. That code changes every day and can’t be turned back into the address. The owner of the code sees totals and trends, never who scanned.
Wi-Fi codes have their content built in and don’t pass through yourqrcode.com when scanned, so we record nothing about those scans. Like any website, our hosting provider handles IP addresses to deliver pages and keep the service secure.
How we use it
- To run the service: create, store, redirect and show your codes, and show you their scans.
- To sign you in and keep your account secure.
- To take payments and know whether your plan is active.
- To send emails about your account and codes: sign-in codes, your QR code, trial reminders, receipts and payment problems.
- To find and fix errors, prevent abuse and improve the product.
We don’t sell your data, we don’t use it for advertising, and we don’t send marketing emails unless you have agreed to receive them.
Services we use
These companies process data on our behalf, only to provide their part of the service:
- Supabase — database, sign-in and file storage (servers in the United States).
- Vercel — hosting of the website and short links.
- Stripe — payments.
- Resend — email delivery.
- PostHog — website analytics, without cookies.
- Sentry — error reports.
How long we keep it
- Your account, codes and their scan history: for as long as your account exists.
- When you delete your account, we delete your account and your codes with their scan history.
- Payment records: Stripe keeps them for as long as financial laws require.
- Error reports and email records: for a limited time, to keep the service working.
Your choices and rights
You can change or delete your codes and delete your account yourself in your dashboard. You can also ask us for a copy of your data, or to correct, delete or stop using it, by emailing support@yourqrcode.com. Depending on where you live, you may also have the right to complain to your data protection authority. We answer requests as quickly as we can, and within the time the law requires.
Children
yourqrcode.com is not meant for children under 16, and we don’t knowingly collect their data.
Changes to this policy
If we change this policy, we update the date at the top. If a change matters for how we use your data, we’ll tell you by email before it takes effect.