We built this service to collect as little as possible. This page explains exactly what we handle, why, and what you can do about it.
01QR codes are made in your browser
When you create a QR code without an account, everything happens on your device: the link, WiFi password, contact details or text you type, and any logo you add, are never sent to our servers.
Downloads (PNG, SVG, PDF) are generated on your device too. We do not store the QR codes you create this way.
02Your account
An account is only needed for the business card, PDF QR codes and scan statistics. You sign in with Google. Google shares your name, email address and profile picture with us; we never see your Google password.
We use this information only to run your account. Account data is stored by our backend provider, InsForge, in the United States.
03Cookies and local storage
We use only what the site needs to work: two sign-in cookies (insforge_access_token, insforge_refresh_token), a short-lived cookie used during Google sign-in (insforge_code_verifier, 10 minutes), a cookie that remembers your language (NEXT_LOCALE), and a local-storage entry that remembers your cookie choice.
We do not use advertising cookies or third-party trackers.
04Visit measurement
To know which pages are useful, our own servers record anonymous events: the page viewed, the language, QR downloads (type and format only, never the content), the type of device, the country estimated from the connection and the site you came from. We do not store your IP address and no outside analytics company receives this data.
If you click Accept on the cookie banner, a random identifier kept only for the current browser tab is added, so we can count unique visitors. If you choose Essential only, no identifier is used.
05Waiting list
If you leave your email to be told when business cards open, we use it only for that message. We do not add it to a newsletter or share it.
06Business cards and payments (when available)
The information you put on a business card (business name, logo, photos, hours, address, phone, links) is published on a public page, because that is its purpose.
Payments will be handled by Stripe. Your card number goes directly to Stripe and never passes through our servers.
When a subscription ends, the card is suspended for 30 days so you can come back, then deleted.
07Scan statistics
For business cards and tracked QR codes, we count how many times they are scanned. We do not build profiles of the people who scan, and we never sell this data.
08Who processes data for us
InsForge (database, sign-in, file storage), Vercel (website hosting), Google (sign-in) and, once payments open, Stripe. Each acts on our instructions and only for the service it provides.
09We never sell your data
We do not sell or rent personal information, and we do not share it for advertising. This includes the meaning of sale and sharing under the California Consumer Privacy Act (CCPA).
10Your rights
You can ask to see the personal information we hold about you, to correct it, or to delete your account and everything linked to it. California residents have these rights under the CCPA; we offer them to everyone. Write to us at the address below and we will answer within 30 days.
11Children
This service is not intended for children under 13, and we do not knowingly collect their information.
12Changes
If we change how we handle data, we will update this page and the date at the top before the change applies.
Contact
privacy@qrvaren.com