DRAFT — requires legal review before launch. Not legal advice and not yet a binding policy.

Static QR codes

Static codes are generated in your browser. The content you enter is not sent to or stored by QR Marketing Dashboard.

Accounts

We store your email address, a password hash managed by our authentication provider, your timezone and your QR codes.

People who scan dynamic codes

For each redirect we record the time, the code, a coarse device type and browser family, an optional country from a trusted edge header, and whether the request looked automated. We do not store IP addresses or full browser strings, and we set no cookies on scanners. To count unique visitors (on by default; owners can turn it off), a daily-rotating one-way hash of the network address and browser is stored instead and deleted within 90 days. It cannot be reversed into an address.

Retention

Detailed scan records are kept for the owner’s plan history window (at most 365 days); daily aggregates for up to 13 months.

Contact

Contact details and the data controller will be added after legal review.