Privacy Policy

We collect the following categories of information:

• Google AdSense — advertisements where enabled. Google may process information under its own Privacy Policy.
• Account information. Your email address and authentication details when you sign up, managed securely through our authentication provider.
• QR code content. The destination URLs, names, colours, WiFi connection details when you choose a WiFi QR, and any images you upload to create and customise your QR codes.
• Scan analytics. When someone scans your QR code, we record data such as the time of the scan, approximate location (country and city derived from IP address), device type, operating system, and browser. We store IP addresses, user-agent details, language, and referrer information when available. IP addresses help estimate location, identify repeat scans, and limit abuse; they are not a reliable way to identify a person.
• Payment information. When you subscribe to a paid plan, payments are processed by Razorpay. We retain payment and order references to verify purchases and manage plan access. We do not store full card details. Razorpay handles checkout information under its own privacy policy.
• Usage and technical data. Log data, cookies, and similar technologies used to operate, secure, and improve the Service.

QR images and their destination links are intended for public sharing. Anyone with the image or link may access the destination. A native WiFi QR contains the network name and password needed to join that network; share it only with people who should have access and rotate the password when access should end. Do not include other private access tokens or confidential information. Third-party destination sites have their own privacy practices.

• To provide, operate, and maintain the Service, including redirecting QR codes and generating analytics;
• To verify payments, activate fixed-duration plans, and respond to billing questions;
• To authenticate you and keep your account secure;
• To respond to your support requests and communicate important updates;
• To detect, prevent, and address fraud, abuse, and security issues;
• To comply with our legal obligations.

Where applicable, we process your personal data on the basis of: performance of our contract with you (to deliver the Service); your consent (where required); our legitimate interests (to secure and improve the Service); and compliance with legal obligations.

We use service providers to authenticate accounts, store data, deliver images, and process payments. These include:

• Razorpay — payment processing and transaction verification. See Razorpay’s Privacy Policy.
• Clerk — shared BuildNerd authentication, verified email and secure account sessions.
• Supabase — database hosting.
• Our hosting infrastructure — public storage and delivery of generated QR images on our server.
• Hosting and infrastructure providers — to run and deliver the Service.

We do not sell your personal data. We may disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users and the public.

We use essential cookies to keep you signed in and to operate the Service securely. We also use browser local storage to save QR drafts while you sign up, and collect page-performance measurements such as loading time and page path. First-party website measurement stores aggregate page views, prepared QR exports and funnel events by day, public page category and predefined source/campaign categories for up to 90 days. It does not store individual visitor identifiers, QR destinations, Wi-Fi passwords, message contents or full referrer URLs. Browser session storage remembers a source category and your measurement preference, without a visitor ID. Measurement respects Do Not Track and Global Privacy Control. You can disable it for this browser tab session by opening the site with ?analytics=off, or enable it again with ?analytics=on. IP-based abuse limiting and infrastructure request logs remain separate from aggregate measurement. Google AdSense advertisements and payment-provider pages may use their own cookies according to their providers' policies. You can control cookies through your browser settings, though disabling essential cookies may affect functionality.

We retain your account data and QR code data for as long as your account is active. Scan analytics are retained to provide historical reporting. You can request account deletion or data removal through support. Retention may also be necessary for legal, accounting, security, or fraud-prevention purposes. Backup copies may persist until they are rotated; contact us for information about your specific request.

Depending on your location, you may have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate data;
• Request deletion of your data;
• Object to or restrict certain processing;
• Request a copy of your data in a portable format;
• Withdraw consent where processing is based on consent.

To exercise any of these rights, email us at [email protected] from your registered email address. We will respond within the timeframe required by applicable law.

We use industry-standard technical and organisational measures to protect your data, including encryption in transit, access controls, and secure infrastructure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your data may be processed and stored on servers located outside your country of residence. Where we transfer data internationally, we take steps to ensure it is protected by appropriate safeguards consistent with this Policy and applicable law.

The Service is not directed to individuals under the age of 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date. If changes are material, we will notify you by email or through the Service.

If you have any questions or concerns about this Privacy Policy or how we handle your data, contact us at [email protected]. You can also reach our support team for assistance.