QRtoad

Privacy Policy

Effective 17 July 2026

This policy explains what data QRtoad (“we”, at qrtoad.app), operated by Štěpán Růžička (Steven Rose), a sole trader based in the Czech Republic, collects and how we use it. By using the Service you agree to this policy.

1. Data we collect

  • Account data: your email, and an optional display name, managed via our authentication provider (Supabase).
  • Content you create: QR payloads, styles, saved codes, destination URLs, and uploaded logos.
  • Billing data: handled by Stripe. We store a customer reference and subscription status, not your full card details.
  • Usage & scans: aggregate counters (e.g. API renders) and, for dynamic QR codes, scan events. Scan events store a coarse referer host only — no full IP address and no full user-agent.

2. How we use it

To provide and secure the Service, render and serve your QR codes, process subscriptions, enforce plan limits, prevent abuse, and communicate with you (for example, transactional emails).

3. Sharing & processors

We share data only with the processors that run the Service — including Supabase (database, auth, storage), Stripe (payments), and Resend (transactional email) — and where required by law. We do not sell your personal data.

4. Cookies & advertising

We use a few cookies and similar technologies: essential ones to keep you signed in and secure, privacy-friendly product analytics, and — on the free tier — advertising via Google AdSense.

Google and its partners may use cookies to serve and measure ads, including personalized ads based on your prior activity. For visitors in the EEA, UK, and Switzerland we show a Google-certified consent message (CMP) before any personalized advertising cookies are set, and you can accept, reject, or manage your choices there.

You can manage or opt out of personalized ads anytime at myadcenter.google.com, and learn how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites. Pro members don’t see ads.

5. Retention

We keep account and content data while your account is active. Downgrading or canceling does not delete your content. Scan analytics may be aggregated or pruned over time. You can request deletion of your account and data.

6. Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data. Contact us to exercise them.

7. Contact

Questions about privacy? Email privacy@qrtoad.app. See also our Terms of Service.