oneqrcode ("we", "us") provides permanent QR codes with a redirect layer and scan analytics. This policy explains what we collect, why, and the choices you have. It applies to oneqrcode and our short-link domain used for redirects.
Information we collect
- Account details. Your name, email address, and profile image. If you sign in with Google, we receive your basic Google profile and a token — we never see your Google password.
- Onboarding answers. How you heard about us and how you intend to use the platform, to tailor your experience.
- Your QR content. Code titles, destination URLs, short codes, and design settings (colors and any logo image you add). Logo images are rendered into the QR in your browser; we store them only if needed to reproduce your design.
- Scan analytics. When someone scans one of your dynamic codes we record a one-way hashed IP address, approximate country, device type, operating system, browser, referrer, and any UTM parameters. We do not store raw IP addresses and cannot identify the individual who scanned.
- Billing metadata. Plan, subscription status, amounts, and identifiers from our payment processor. Card and bank details are handled entirely by Cashfree — we never receive or store them.
How we use your information
- Operate the service and redirect scans to your chosen destination.
- Show you scan counts and (on paid plans) detailed analytics.
- Process subscriptions, invoices, and renewals.
- Secure the platform, prevent abuse, and provide support.
- Send essential service and account emails.
Cookies
We use a small number of strictly necessary cookies to keep you signed in. We do not use third-party advertising or cross-site tracking cookies.
Service providers
We share data only with the processors needed to run oneqrcode:
- Neon — managed Postgres database hosting.
- Upstash — Redis cache for fast scan redirects.
- Cashfree — subscription and payment processing.
- Google — optional sign-in.
Each processes data on our behalf under their own security and privacy terms. We do not sell your personal data.
Data retention
We keep your account and codes while your account is active. Because printed codes must keep working, archived codes and their redirect history are retained rather than deleted. Aggregated scan records are retained to power your analytics. You can request deletion of your account and associated data at any time.
Your rights
You may access, correct, export, or delete your personal data, and object to certain processing. To exercise these rights, contact us at the address below. We will respond within a reasonable period.
Security
Passwords are hashed, scanner IPs are irreversibly hashed, and traffic is encrypted in transit. No system is perfectly secure, but we work to protect your data using industry-standard measures.
Children
oneqrcode is not directed to children under 16, and we do not knowingly collect their data.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the "last updated" date shown on this page and, where appropriate, communicated to you.
Contact
Questions about your privacy? Email privacy@oneqrcode.com. See also our Terms of Service.