Privacy Policy

Summary

• Static QR codes are created in your browser. The content of a static code — a link, WiFi password, contact card or text — is not sent to our servers or stored by us.
• Dynamic codes and Smart Links are stored in your account so that they can redirect, be edited and show statistics.
• Scan statistics are anonymous and coarse. We record the date, country, device type, operating system and browser family of each scan. We do not store IP addresses or precise locations, and we do not identify the people who scan your codes.
• We do not sell personal data and we never show ads to people who scan your codes.

Information we collect

Account information. When you sign in, we store your name, email address and profile picture from your sign-in method (email link or Google), plus the settings you choose.

Codes you save. For dynamic QR codes and Smart Links we store the destination, the type, your design settings, and the options you set (UTM tags, start and end dates, A/B variants, routing rules, link preview text and image). Passwords for protected codes are stored only as a salted hash.

Files you upload. PDFs, images and audio files you upload for hosted codes (PDF, menu, gallery, MP3) are stored in our cloud storage and are publicly reachable through your code, like a link you share. Do not upload documents that contain other people’s personal data unless you are allowed to share them.

Responses to your codes. Feedback and form codes collect the answers that people choose to send, an optional star rating and, if you ask for it, an optional email address. These are stored for you, the owner of the code, and shown only in your dashboard. You are responsible for informing respondents how you use their answers.

Scan records. When someone opens a dynamic code or Smart Link, we record the time, the country derived from the network connection, the device type, operating system and browser family, the destination used and, if relevant, the A/B variant or rule. Link-preview bots are not counted. We do not store the scanner's IP address, cookies or identity.

AI QR art. If you generate an AI art code, your text prompt is first sent to Waffo's content-safety service, which checks it against our content rules before anything is generated. If it passes, the prompt and the content of the code are sent to Replicate, our image-generation provider, to create the image, and the result is stored so you can download it. Credits used and refunded are recorded on your account.

Payments. Purchases are processed by Waffo.com Limited (Waffo Pancake), our Merchant of Record. Waffo collects your payment details directly; we receive your email address, the order, amount, currency, status and subscription period, but never your full card number.

Website analytics. On public pages we use Microsoft Clarity to understand how visitors use the site (pages viewed, clicks and scrolls, including session replays). Where a cookie banner is shown, Clarity cookies are set only after you accept. See the Microsoft Privacy Statement.

Technical data. Our hosting provider processes standard request data (such as IP address and user agent) to deliver the site and protect it from abuse. We do not combine this with scan statistics.

How we use information

• To create, store, redirect and display your dynamic codes and their statistics.
• To check the destinations of dynamic codes and Smart Links against Google Safe Browsing and block links to phishing or malware.
• To operate your account, plan, credits, subscriptions, refunds and billing.
• To answer support requests and investigate abuse reports.
• To understand and improve how the site is used.

Sharing

We share data only with the service providers that run the product on our behalf, and when required by law or to protect people from harm. They are: Cloudflare (hosting, database, file storage, email forwarding), Google (Sign in with Google and Safe Browsing checks), Microsoft Clarity (website analytics), Replicate (AI image generation), Waffo (payments as Merchant of Record and AI prompt screening) and Resend (account email). Details are on our Subprocessors page. We do not sell or rent personal data.

Retention

Dynamic codes, Smart Links, uploaded files, scan records and responses are kept until you delete them or your account. When you delete a code, its scan records and responses are deleted with it. Static codes are never stored by us, so there is nothing to delete.

Your choices and rights

You can view, edit, export or delete your dynamic codes at any time from My QR codes. To delete your account and all its data, email us and we will do it for you. Depending on where you live, you may have rights to access, correct, delete or port your personal data, or to object to its processing. To exercise them, email us at support@styleqrcode.com.

Security

Data is encrypted in transit, access is limited to what is needed to run the service, and protected-code passwords are hashed. No system is perfectly secure, and we will inform affected users of any breach as required by law.

Children

StyleQRCode is not directed at children under 13, and we do not knowingly collect their personal data.

Changes

We will update the date at the top of this page when this policy changes and, for significant changes, notify signed-in users.

Contact

Questions about privacy: support@styleqrcode.com.