Privacy notice (placeholder)

This is a placeholder to be reviewed by a qualified data-protection adviser before launch.

We aim to comply with UK GDPR and the Data Protection Act 2018.

What we collect when a QR code is scanned

The time of the scan and which QR code was scanned.
Approximate location (country, and where available region/city) derived from network information — not GPS.
General device type, operating system and browser, parsed from the request.
Referrer and campaign (UTM) parameters, where provided.

IP addresses

We use the IP address transiently for approximate location lookup and abuse prevention. We do not permanently store full IP addresses. Instead we derive a non-reversible token using a secret that rotates periodically, used only to estimate unique scans and prevent abuse.

Retention

Scan analytics are retained for a configurable period and then automatically deleted.

Your rights

You can export your account data or delete your account at any time from your dashboard settings. Deletion removes your account, QR codes, uploaded logos and analytics.

Processors

Placeholder for the list of subprocessors (hosting, payments, email, GeoIP).

Contact

Placeholder for the data controller's contact details.