Privacy Policy

Scanning a QR code

When you scan a QR code that points to this service, we redirect you to the destination the code's owner configured. We do not keep a record of your individual scan: instead, we increment a shared count for "how many scans happened for this QR code in this hour," rounded down to the start of the hour. No exact scan time is ever stored.

Approximate location

If the code's owner has enabled analytics for that code, the count above is also broken out by approximate location derived from your IP address: city, region, and country. The lookup happens entirely on our own servers using a local copy of the GeoLite2 database. We do not store coordinates for your scan: city names are all that's kept, and any map point shown to the code's owner is a fixed, pre-computed point for that city in general, not a location derived from your scan.

• Your IP address is used only for this lookup. It is not stored, and not shared with any third party.
• The location reflects your network's estimated area, not your actual position, and is typically accurate only to tens or hundreds of kilometres.
• Nothing about a scan is stored individually: only an hour-and-city count shared across everyone who scanned that code in that hour, so there is no per-scan record containing your name, account, device identifier, or anything else that identifies you.
• No cookies or other identifiers are placed on your device by the redirect.

Who sees this data, and why

Scan records are shown to exactly one party: the owner of the QR code you scanned, through their analytics dashboard, so they can understand the reach of their own codes. We collect and use this data because it directly serves that purpose: showing a code's owner how their code is being used, the reason a QR code with analytics enabled exists in the first place. This service isn't currently offered to users in the European Union, the United Kingdom, China, or India; if that changes, this section will be updated to reflect any additional legal basis that applies there (for example, the EU's GDPR). You can object to this processing at any time via the contact address below.

No sale of data

We never sell or rent scan data (timestamps, approximate location, or anything derived from them) and we never share it with any third party for that party's own purposes, whether or not money changes hands. This commitment survives product changes and binds any successor to the service in a merger or acquisition. Beyond the code's owner, the only parties that ever touch scan data are service providers storing or processing it on our instructions to run the service, and authorities where the law compels disclosure.

Retention

Scan records are kept until the QR code's owner deletes them, deletes the QR code, or deletes their account.

Account holders

If you create an account, we store the email address, username, and password hash needed to operate it, plus any profile picture you upload and the QR codes you create. You can export your data or delete your account (and all data associated with it) at any time from the application.

Contact

Questions or requests regarding your data: privacy@qrverde.com.