HoldQR
Back to Home

Privacy Policy

Last updated: October 2026 • Effective immediately

Our Core Privacy Commitment: Zero-PII Scanner Architecture & Minimal Account Data

HoldQR is engineered from the ground up with a privacy-first approach. For end users scanning your dynamic QR codes, we practice a strict zero-PII policy: we never log, store, or sell IP addresses, individual device identifiers, or GPS coordinates. For registered creators, we collect only the minimal data necessary to maintain your account and manage your dynamic destinations.

1. Information We Collect

HoldQR distinguishes strictly between anonymous static QR creation and authenticated dynamic QR hosting:

  • Static QR Creation (Anonymous): If you use HoldQR to generate and download static QR codes (e.g. WiFi, URL, text), processing occurs entirely client-side in your browser. We require no account, store no payload, and collect zero personal information.
  • Account Information (Dynamic QRs): When you create an account to manage editable dynamic QR codes, we collect your email address and encrypted authentication credentials (managed via Supabase Auth).
  • Dynamic QR Configurations: Destination URLs, QR code names, styling parameters, and optional embedded logos.
  • Payment Information: Transaction ID, license entitlement, and payment timestamp (handled securely by Dodo Payments as our Merchant of Record; we never store your credit card or banking details).
  • QR App Responses: When someone fills in a QR app you create (for example a form, feedback, photo album or file drop), we store what they choose to submit (such as their name, contact details, answers, photos or files) on your behalf, so you can view, export and delete it. You decide what your QR app asks for; we use these responses only to provide the service to you.

2. Scanner Privacy & Scan Analytics

When an end user scans a HoldQR dynamic QR code, our edge redirect layer processes the request instantaneously. The scan event records only coarse, non-identifying aggregate metrics:

  • Timestamp: Date and time the redirect occurred.
  • Coarse Country: 2-letter ISO country code derived from CDN edge headers (e.g. "IN", "US"). No city, postal code, or exact coordinates are ever recorded.
  • Device Category: Coarse classification (Desktop, Mobile, Tablet).
  • Operating System & Browser: Browser family (e.g. Chrome, Safari) and OS family (e.g. iOS, Android).
  • Sanitized Referrer: Origin domain and path only. All sensitive search query strings, tokens, and email addresses are automatically stripped before storage.

3. Data Portability & GDPR / CCPA Compliance

We uphold your complete rights under global data protection laws, including GDPR and CCPA:

  • Right to Access & Export: You can download all your account data, QR codes, and analytics anytime in both CSV and JSON formats from your Account Settings.
  • Right to Erasure (Right to be Forgotten): You can permanently delete your account at any time. Account deletion immediately cascades to purge all your dynamic QR codes, scan logs, and billing references.

4. Third-Party Service Providers

We partner strictly with industry-standard, compliant infrastructure providers:

  • Supabase: For encrypted authentication and PostgreSQL database hosting.
  • Dodo Payments: Merchant of Record for secure, PCI-DSS compliant global payment processing and automated tax compliance.
  • Edge Cloud Infrastructure: For global edge routing, SSL termination, and high-availability redirection.
  • Cloudflare R2: Encrypted storage for photos and files uploaded to QR apps.
  • Cloudflare Turnstile: Bot protection on public QR app forms. When enabled, the visitor's browser and IP address are checked by Cloudflare at the moment of submission; HoldQR does not store the IP address.
  • Resend: Delivery of account and new-response notification emails.
  • Google: Only if you connect Google Sheets (see section 5).
  • Website Analytics: Vercel Analytics and clicks.page measure aggregate page visits on holdqr.com.

5. Google Sheets and Google User Data

If you choose to connect Google Sheets to a QR app, HoldQR asks Google for permission to create and edit only the spreadsheets HoldQR creates for you (Google's drive.file scope), plus your Google account email so you can see which account is connected.

  • What we use it for: solely to create a spreadsheet for your QR app and write that app's responses into it.
  • What we never do: read, list or change any other file in your Google Drive; use Google user data for advertising; sell it; or share it with third parties.
  • What we store: your Google account email and an encrypted access token (AES-256), so new responses can be added to your sheet automatically.
  • Your control: you can stop syncing any QR app from your dashboard (the spreadsheet stays in your Drive), and revoke HoldQR's access at any time at myaccount.google.com/permissions. Deleting your HoldQR account deletes the stored token.

HoldQR's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. Contact Our Privacy Team

If you have questions or concerns regarding our privacy practices or wish to exercise your data rights, please contact us at:

Email: privacy@holdqr.com