Privacy Policy

QRtistry ("we," "us") operates https://qrtistry.com, the QRtistry Companion Chrome extension, and related services for creating QR codes, managing dynamic redirects, and viewing scan analytics.

This policy explains what we collect, why we collect it, and the choices you have. Static QR code generation in your browser does not require an account and does not send your destination URLs to our servers unless you choose dynamic features.

Depending on how you use the service, we may collect:

• Account and workspace data — email address, workspace token, subscription status, and team membership when you sign in, subscribe, or collaborate.
• Dynamic code data — destinations, titles, tags, campaign assignments, schedules, custom domains, and QR styling you save for dynamic codes.
• Scan analytics — timestamp, approximate location (country, region, city, and rounded coordinates when available from IP), device type, browser, and referrer data when someone scans a dynamic code.
• Optional placement metadata — you may label where a QR was installed (venue, city, expected location). These labels are manual and are not collected from scanners' devices.
• Geo spike alerts — if enabled, we email you when scan volume in a city crosses a threshold within an hour. Alerts use the same approximate IP geolocation as analytics.
• Payment information — handled by Stripe. We receive billing status, customer identifiers, and receipt email; we do not store full card numbers.
• Contact form submissions — name, email, company, topic, and message when you reach out through our contact form.
• Technical logs — IP address, user agent, and request metadata for security, rate limiting, and abuse prevention.
• Analytics — aggregated usage events through Google Analytics 4 when enabled, including page views and conversion events.

The QRtistry Companion Chrome extension lets you generate styled static QR codes from the current tab or a right-clicked link, page, or image. Optional signed-in features show your dynamic codes and scan totals from the same dashboard API as https://qrtistry.com.

All extension code ships inside the extension package. The extension does not download or execute remote code from our servers or any third party.

Static QR export runs entirely in your browser. When you generate a static code, the URL you encode is processed locally and is not sent to our servers for that export.

• Website content — when you open the extension popup or use a context-menu item, the extension reads the active tab URL or the link, page, or image URL you selected. This is used only to pre-fill the generator and render your QR code. For static export, that URL is not transmitted to our servers.
• Locally stored data — your last 50 generated codes are saved in chrome.storage.local on your device only and are never synced to our servers. Default preset, export size, and behavior settings are stored in chrome.storage.sync through Chrome's extension sync (if enabled in your browser).
• Personally identifiable information (signed-in use only) — if you are signed in to qrtistry.com, the extension uses your existing site session to call our API. We may receive your email address, name, workspace token, dynamic code list, and scan counts — the same account data shown in your dashboard. This is used to display My codes, account details in extension settings, and the optional toolbar badge for unseen scans.
• Authentication information — signed-in features rely on the qrtistry.com session cookie established when you sign in on the website. The extension does not collect passwords or magic-link tokens.
• What we do not collect — the extension does not track or transmit your browsing history, does not use browser geolocation, and does not run in the background on pages you visit except to register context-menu items and poll scan counts for signed-in users who enable the badge.

We use collected information to:

• Provide and operate QR generation, redirects, analytics, API access, and Agency features.
• Process payments and manage subscriptions.
• Send transactional email such as sign-in links, milestone alerts, and contact form notifications.
• Improve reliability, prevent abuse, and debug issues.
• Understand product usage through analytics.
• Respond to support and sales inquiries.
• Power optional Chrome extension features such as My codes, scan totals, and the toolbar badge when you are signed in.

We do not sell your personal information. We share data with service providers that help us run the product, including:

We may also disclose information if required by law or to protect the rights, safety, and integrity of the service.

• Stripe — payment processing.
• Resend — transactional and notification email.
• Hosting and database providers — application hosting and PostgreSQL storage.
• Google Analytics — site and product analytics when configured.

We retain account and dynamic code data while your workspace is active and as needed to provide the service. Contact form submissions are retained to validate conversions and support follow-up.

Scan records are kept for analytics and reporting. You may delete dynamic codes from your dashboard; associated scan history may be removed or anonymized according to operational needs. One-time ($9) purchases are tied to a specific code — deleting it does not provide a free replacement; update the destination URL if you only need to change where scans go.

You can use static QR codes without creating an account. For dynamic features, you may request access, correction, or deletion of account-linked data by contacting us.

You can control browser cookies through your browser settings. Analytics may be limited by ad blockers or consent tools you use locally.

We use industry-standard measures including encrypted transport (HTTPS), access controls for admin systems, and rate limiting on sensitive endpoints. No method of transmission or storage is completely secure.

QRtistry is not directed at children under 13, and we do not knowingly collect personal information from children.

We may update this policy from time to time. The effective date at the top of this page will change when we do. Continued use of the service after updates constitutes acceptance of the revised policy.

Questions about privacy? Use our contact page at https://qrtistry.com/contact.