Privacy Policy

This policy explains what QRaft collects, why, and the choices you have. It covers people with a QRaft account and people who scan QR codes made with QRaft.

1. Data we collect

• Account data: your name, email address, password (stored only as a secure hash) and language preference.
• Your content: the codes you create, their designs and settings, and the files you upload.
• Billing data: payments are handled by Paddle. We receive your plan, subscription status and Paddle's customer and subscription IDs, never your full card details.
• Scan data: when someone scans a dynamic code, we record the time, approximate country and city (worked out from the network), device type, operating system, browser and referring page, plus a one-way hash used to count unique visitors. We do not store the scanner's IP address.
• Feedback: whatever a person chooses to send through a feedback form, such as a rating, a comment and optional contact details.

2. How we use data

We use data to run the Service, show code owners their scan analytics, keep the Service secure and prevent abuse, manage subscriptions, answer support requests, send essential account emails, and send the optional weekly report and scan milestone alerts, which you can turn off in Settings. We do not sell personal data and we do not show ads.

3. Service providers

We use Cloudflare to host the Service, its database and uploaded files, Paddle to process payments, Resend to send emails, and, with your consent, Google Analytics for site statistics. They process data only to provide their services to us.

4. Cookies

QRaft uses only essential cookies: one to keep you signed in, one to remember your language, your time zone and dashboard view, and one to remember that you unlocked a password-protected code. Only if you accept them in the cookie banner, we also use Google Analytics cookies to understand how the site is used (with IP anonymization); you can decline, and they are never used on the QR pages people scan. We use no advertising cookies. Paddle's checkout may set its own cookies when you pay.

5. Data retention

We keep your account data and content while your account exists. When you delete your account, its data, codes and files are deleted right away, and any remaining copies within 30 days, except records we must keep by law or for billing. Scan data is kept to show analytics to the code owner and is deleted with the account.

6. Your rights

You can change your name, notification emails and password, or delete your account, in Settings. To access, correct or export your personal data, email qr@linkom.app.

7. If you run QR codes

If you use QRaft to collect information from the people who scan your codes, for example through a feedback form, you are responsible for telling them how you will use it.

8. Children

QRaft is not intended for children under 16.

9. Changes

We may update this policy. If a change is significant, we will tell you on the site or by email.

10. Contact

Privacy questions? Email qr@linkom.app.