Privacy Policy for QReate.dev
1. Data We Collect
When someone scans a QR code generated through QReate.dev, we collect the following information:
- Country and region: To provide geographic analytics for QR code creators.
- User agent: To identify the type of device and browser used.
- Hashed IP address: We collect the IP address of users, but it is immediately hashed using a random, QR-specific salt to ensure that it cannot be linked back to any specific individual. This is done for security and privacy purposes.
We do not collect any personal data that directly identifies users, and the IP addresses are not stored in a readable form.
2. Purpose of Data Collection
The data collected is used for the following purposes:
- Analytics and Reporting: To provide geographic and device-related analytics to QR code creators and help them understand the reach of their QR codes.
- Improvement of Platform Services: To enhance and optimize the services and performance of the platform.
3. Legal Basis for Processing
We process data based on the following legal basis under GDPR:
- Legitimate interests: We process the country, region, user agent, and hashed IP address to provide our platform's services, improve analytics, and ensure security.
4. Data Sharing
We do not sell or share collected data with third parties for marketing or advertising purposes. The data is only used internally for platform functionality and analytics.
5. Data Retention
We retain data only as long as necessary to fulfill the purposes outlined in this Privacy Policy. Data related to scans of a particular QR code is stored for a maximum of 1 year (365 days). After this period, the data will be deleted automatically. Additionally, data related to scans is deleted as soon as the QR code itself is deleted. Users may contact us to request the deletion of their data at any time, and we will erase it promptly in accordance with GDPR guidelines.
6. Logo Storage
Logos added to QR codes with tracking are stored in our database to facilitate the creation and display of QR codes. If a user updates the logo associated with a QR code, the existing logo is replaced with the new one. Users also have the ability to delete logos from our database by removing the logo from the QR code. Once deleted, the logo is permanently removed from our systems.
7. End-User Rights
End-users (those scanning the QR codes) have the following rights:
- Access: You can request details of the data we hold about you, including the hashed IP address, country, region, and user agent.
- Deletion: You have the right to request the removal of your data, including any hashed IP address, country, region, or user agent information stored by us.
- Objection: You can object to the processing of your data for specific purposes.
- Portability: You can request the transfer of your data in a machine-readable format, subject to certain conditions.
Requests can be made via email at [email protected]. We will respond to requests in accordance with applicable laws.
8. Security Measures
We implement appropriate technical and organizational measures to protect the data we collect from unauthorized access, alteration, disclosure, or destruction. This includes encrypting sensitive information, anonymizing data where possible, and using secure channels for data transmission.
9. Cookies and Tracking
QReate.dev does not use cookies or similar tracking technologies to collect data from end-users. We do not track individual users across different websites or services.
We use a self-hosted version of Plausible Analytics to track the usage of our website. Plausible is GDPR compliant and does not use cookies to collect data. All analytics data is aggregated and anonymized, ensuring that no personal data or identifiable information is stored or processed. Read more about it at plausible.io.
10. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or for other operational, legal, or regulatory reasons. When changes are made, the updated policy will be posted on this page with an updated revision date. Users are encouraged to review this policy regularly to stay informed of any changes.
11. Contact Information
If you have any questions or concerns about this Privacy Policy or our data handling practices, please contact us at: [email protected]