Legal
Privacy Policy
Last updated 6 September 2026
What we store about subscribers. Your Stripe customer ID, the email you gave Stripe at checkout, your subscription status, and the QR codes you create (label, destination URL, scan count). Payment card details never touch our servers; Stripe handles them.
What we store about people who scan. A counter. Each scan increments a number on the code. We do not store IP addresses, user agents, cookies or any identifier for people who scan a code.
Sign-in emails. When you request a sign-in link we send one email to the address on your Stripe record, through Resend. We do not send marketing email.
Cookies. One httpOnly cookie that identifies your subscription session. No advertising or third-party tracking cookies. We use Vercel Analytics, which is cookie-free and aggregates page views.
Processors. Stripe (payments), Vercel (hosting), Neon (database), Resend (sign-in emails). All are located in the United States.
Retention and deletion. Data is kept while your subscription is active and up to 30 days after it ends. To delete your data sooner, cancel in the billing portal and email the address on your Stripe receipt.
Your rights. You can request a copy or deletion of your data at any time using the contact above.