Privacy Policy

Last updated: April 20, 2025

What we collect

We collect your email address (for account creation), payment information (processed by Stripe — we never see your card number), and QR code scan data (IP address hash, device type, approximate location from IP, user agent). We do not sell your data to third parties.

Scan tracking

When someone scans your QR code, we record the approximate location (country/city from IP, not GPS), device type, browser, and a one-way hash of the IP address. The IP hash is used to count unique scans and is not reversible to the original IP. Raw IP addresses are never stored.

Cookies

We use cookies for authentication (Supabase session cookies) and analytics (page views). We do not use third-party advertising cookies.

Data retention

Account data is retained until you delete your account. Scan event data is retained for 2 years. You can export your data at any time from Settings > Export.

Your rights (GDPR)

If you are in the EU, you have the right to access, rectify, erase, and export your data. Contact privacy@qrwide.com with any requests. We respond within 30 days.

Contact

privacy@qrwide.com