Privacy policy

1. Data controller

The data controller responsible for processing your personal data is QR TheCode². You can contact us about privacy matters at privacy@qrthecode2.com.

2. Personal data we collect

We may collect and process the following categories of data:

• Account data (name, email address, password hash, account settings).
• Usage data (logs, IP address, device/browser information, pages visited, scan statistics).
• Content data (QR codes you create, URLs and metadata you configure).
• Billing data if applicable (billing name, address, VAT number, partial payment information processed by our payment provider).

3. Purposes and legal bases

We process your data for the following purposes:

• To create and manage your account and provide the Service.
• To secure the Service, detect fraud and prevent abuse.
• To provide analytics about QR code scans and usage.
• To communicate with you about the Service (support, updates, billing).

Depending on the case, the legal basis may be the performance of a contract, your consent, our legitimate interests, or compliance with legal obligations.

4. Data sharing and transfers

We may share your data with trusted third-party providers (for example hosting, analytics, payment, email delivery) strictly for the purpose of operating the Service. These providers are bound by data protection obligations.

4.1 Advertising (Google AdSense)

We may display ads on some public pages using Google AdSense. AdSense may use cookies and similar technologies to serve and measure ads, including personalized ads where permitted by law and your choices.

If you are located in regions where consent is required (for example the EEA/UK), we will ask for your consent before storing or accessing non-essential cookies. You can change your choices in your browser settings and through the consent options provided on the site when available.

5. Data retention

We retain personal data only for as long as necessary to provide the Service, comply with our legal obligations, resolve disputes and enforce our agreements. You can request deletion of your account at any time, subject to legal retention requirements.

6. Your rights

Depending on your jurisdiction, you may have the right to access, rectify or delete your data, restrict or object to processing, and request data portability.

To exercise these rights, please contact us using the email address indicated in the "Data controller" section. We may need to verify your identity before responding to your request.

7. Changes to this policy

We may update this privacy policy from time to time. The updated version will be published on this page with an updated "last updated" date. We encourage you to review this policy regularly.