Privacy

VIKSE DEVELOPMENT AS (organisation number 937 865 163, Damsgårdsveien 18, 5058 Bergen, Norway) is the data controller for QR Maker.

Your account: email address, sign-in method, trial end date and subscription status.

Your QR codes: the content you enter (links, text, contact details, Wi-Fi details and so on), your design settings and logo.

Scans: the time of each scan, the country (from the network, not GPS) and the device type (iPhone, Android, computer). We do not store IP addresses.

Optional website analytics: if you allow analytics cookies, Google Analytics and DataFast measure visits to our public pages, including page paths, browser and device information, approximate location and referring site. We exclude QR code content, sign-in pages and account pages, and send no URL query strings apart from campaign tags (such as utm_source) to DataFast. If you then subscribe, we pass your DataFast visitor ID to Stripe so we can see which pages lead to purchases.

If you connect QR Maker to an AI assistant (such as Claude or ChatGPT) or another app, we store that you approved it and when. The app receives an access token for your account, which you can revoke under Dashboard → Integrations.

If you create API keys, we store each key's name, its first characters and a one-way hash of it, never the key itself, plus when it was last used.

Apps you connect only send us what their requests contain, such as the content and design of a code they create. We don't receive or store your conversations with an AI assistant. Logo images given as a web address are downloaded once and stored with the code.

To protect the service we count requests per account for rate limits; these counters are kept for a day at most.

To run the service: serve your QR codes, let you edit them, show you scan statistics, and manage your trial and subscription.

To email you about your account, such as sign-in links and reminders before your trial ends. We don't send marketing without asking.

Supabase (database and sign-in, hosted in the EU), Stripe (payments; we never see your card number), Resend (account emails), Netlify (hosting) Google (Google sign-in and optional Google Analytics) and DataFast (optional website analytics). We don't sell your data. Advertising personalization and Google Signals are disabled for our analytics.

You can edit or delete any QR code, and delete your whole account from your dashboard. Deleting your account removes your codes and scan data. We keep a one-way fingerprint of your email so the free trial can only be used once.

Analytics cookies are optional and are not loaded until you allow them. You can reject analytics or withdraw your choice using Cookie preferences in the footer. Your choice is stored in this browser. Google and DataFast may process analytics data outside the EEA; see Google's privacy policy at https://policies.google.com/privacy and DataFast's at https://datafa.st/privacy-policy.

Questions or requests: contact torstein@vikse.dev.