Privacy Policy

What Information We Collect

For static QR tools, your entered content normally remains in your browser. For accounts and Dynamic QR, we process account identifiers and email through our authentication provider; QR titles, slugs, destination URLs, language routes, designs, statuses, lifetime and monthly scan counts, and audit logs. Detailed scan events may include time, language, referrer, coarse user-agent family, and resolved URL. ZapQR does not store raw IP addresses in scan events, but ZapQR and its infrastructure providers may process network data, including IP addresses, to deliver and secure the service. Magic-link abuse controls store hashed email and IP tokens rather than the raw values.

How We Use Information

We use information to provide authentication, editable Dynamic QR links, public redirects and scan statistics; remember preferences; deliver support and feedback; measure optional product usage; diagnose failures; prevent fraud or abuse; secure ZapQR; and comply with legal obligations. We do not sell your QR content or personal data.

Cookies & Analytics

ZapQR uses cookies and local storage for language preferences, authentication sessions, consent choices, interface state, saved design preferences, and locally retained feedback copies. Google Analytics loads only after analytics consent and receives only allowlisted product events and parameters. You can decline optional analytics or clear browser storage; clearing required authentication data may sign you out.

Data Security & Retention

We use reasonable technical and organizational safeguards and restrict access to people and providers who need it to operate ZapQR. Browser-local data remains until you clear it or your browser removes it. Dynamic QR records, scan counts, scan events, audit logs, and monthly usage records are retained as needed to operate the account, redirects, analytics, security, and abuse limits. Archiving a Dynamic QR stops its redirect but is not permanent deletion. No method of transmission or storage is completely secure.

Third-Party Services

ZapQR relies on service providers including Cloudflare for delivery and security, Supabase for authentication and database services, EmailJS for feedback delivery, Google Maps for the optional location picker, Google Analytics after consent, and Google AdSense if advertising is enabled. These providers may receive the information needed to perform their services and handle it under their own terms and privacy policies.

AI QR code art

When you generate AI QR code art, your link (drawn into a control image) and your prompt are sent to Replicate, our AI image provider, together with the seed and model settings. We do not send your email address or account ID to Replicate. The finished image is stored privately in your account (Cloudflare R2 storage, with details in Supabase) and only you can view or download it. You can delete a creation at any time; deleting it does not restore a used image. Do not include personal or sensitive information in links or prompts.

Pro waitlist

If you join the Pro waitlist, we store your email address, language, where you signed up and the time you agreed. We use it only to send one email when ZapQR Pro launches. To limit abuse we keep short-lived, one-way hashes of the email and network address, never the raw IP address. To have your email removed, write to us at the contact address below. If you answer the optional question about how you'd prefer to pay, we store that answer too and use it only to plan ZapQR Pro.

Google Advertising

ZapQR may use Google AdSense. If advertising is enabled, Google and third-party vendors may place or read cookies on your browser, use web beacons, IP addresses, or other identifiers, and use visits to this and other websites to serve and measure ads, including personalized ads where permitted. Google’s use of advertising cookies enables Google and its partners to serve ads based on your visits. Before activating advertising technologies where consent is legally required, ZapQR will provide the required consent choices.

Manage personalized advertising or opt out through: Google Ads Settings · aboutads.info

How to Contact Us

If you have privacy questions or requests, reach the ZapQR team at support@zapqr.net. We respond within a reasonable timeframe and honor applicable data rights.

Your Choices & Rights

You may accept or decline optional analytics, clear cookies and local storage, manage personalized advertising choices, or contact us to request access, correction, export, deletion, restriction, or objection where applicable. Some records may need to be retained for security, abuse prevention, quota enforcement, legal obligations, or continued Dynamic QR operation. Archiving a Dynamic QR is not the same as deleting account data.