Privacy policy
Version 2.0 · Last updated
Who
Write to [email protected] about anything on this page.
What data and why
- Account: e-mail address, optional name and password hash, for sign-in.
- Billing: records held by Stripe, for payments, invoices, refunds and withdrawals.
- Scans: shortened IP, city, device type and a visitor code that changes daily, for the code owner's analytics.
- Uploads: files and pages you add, served to the people who scan your codes.
- E-mail: messages we send you and their delivery status, for service and billing notices.
- Destinations: links and domains of codes, for safety checks.
Personal data is never sold.
Third-party providers
- Hosting (Hostinger, Domain registrar): the server that runs the app and its database, and our domain names.
- Cloudflare (Cloudflare Workers AI (AI image model and text model), Cloudflare for SaaS, LLM for the support assistant, Cloudflare origin certificate, Cloudflare R2, Cloudflare Turnstile): network, custom domains, storage of files and backups, bot checks and AI features.
- Stripe: payments, invoices and fraud checks.
- Resend: sending e-mail.
- Safety checks (PhotoDNA Cloud or Arachnid Shield, MalwareBazaar (abuse.ch), Spamhaus DQS, Cisco Talos and Proofpoint, URLhaus (abuse.ch), Google Web Risk): checks of code destinations and uploaded files.
- Sign-in providers (Sign in with Apple, GitHub sign-in, Google sign-in, LinkedIn sign-in, Microsoft sign-in (Entra ID)): sign-in, only the one you choose.
- Wallet passes (Apple Pass Type ID certificate, Google Wallet issuer): wallet passes, only when you add one.
- Business search (Google Places API): finding a business for a review code.
- Monitoring (Sentry, UptimeRobot): checks that the service is up, and error reports.
- Search engines (IndexNow): telling search engines about new public pages.
- Apps you connect (Canva, Chrome Web Store, Domain Connect templates, Make, n8n, Shopify, WordPress.org, Zapier): only the apps you connect yourself.
Cookies
Only the cookies the service needs to work are set, so there is no cookie banner. Visiting a page sets no cookie.
| Cookie | Purpose | Lifetime |
|---|---|---|
session (on https: __Host-session) |
Keeps you signed in | 30 days |
pending_verify |
Remembers which account is confirming its e-mail address | 30 minutes |
oq_dv |
Recognises this browser so a free trial is given once | 2 years |
oauth_tx, oidc_apple, oidc_microsoft, oidc_linkedin |
Protect a sign-in with another provider | 10 minutes |
oauth_link |
Remembers a sign-in you are linking to your account | 10 minutes |
mfa_pending |
Remembers the first step of a two-step sign-in | 10 minutes |
pk_challenge |
Protects a passkey sign-in | 5 minutes |
ws |
Remembers your workspace | 12 months |
app_editor_mode |
Remembers the simple or advanced editor | 12 months |
theme |
Remembers light or dark mode, once you choose one | 12 months |
__Host-oqp_... (on short-link domains) |
Remembers the password of a protected code | 12 hours |
If a customer turns on tracking pixels on their own pages, those pages ask the people who scan them for consent first.
People who scan a code
A scan record holds the time, the code, the approximate city, the device type and a visitor code that changes every day. The IP address is shortened before anything is derived from it and is not stored. The code's owner sees these records in aggregate, and they are never sold.
Some codes ask before they open. A code can ask for your precise location: it is stored only if you allow it in your browser, rounded to about 100 metres, and cleared after 90 days. A code can ask for your e-mail address or phone number: what you enter goes to the code's owner, who decides what to do with it, and they can delete it at any time.
Retention
| Data | How long |
|---|---|
| Account data | While the account exists, then 12 months after paying stops |
| Invoices and payment records | 10 years, for tax |
| Checkout consent records | 3 years |
| Scan records | As long as your plan keeps scan history |
| Precise scan location, when allowed | 90 days |
| Backups | 35 days, plus monthly copies for 12 months |
Your rights
You can see, correct, export and delete your data. Export and deletion are self-serve in Settings; for anything else, write to the address above.