Privacy Policy

Last updated: March 2, 2026

What data we collect

When you sign in with Google, we store your email address, name, and profile picture to identify your account.

When someone scans a QR code, we collect the scanner's IP address, user agent (browser and device info), referer URL, and timestamp. We use the IP address to determine approximate country and city via GeoIP lookup.

How we use the data

  • To provide scan analytics (location, device type, browser, time) to QR code owners
  • To operate and improve the service
  • To maintain your account and QR codes

GeoIP and IP addresses

We use IP-based geolocation (MaxMind GeoLite2) to determine the approximate country and city of each scan. The raw IP address is not stored in association with personal data and is only used for geolocation at the time of the scan.

Cookies

We use session cookies to keep you logged in. We do not use advertising or tracking cookies.

Third-party services

  • Google OAuth — for authentication (Google's privacy policy applies)
  • MaxMind GeoLite2 — for IP geolocation

Data retention and deletion

Your data is retained as long as you have an active account. You can delete your account and all associated QR codes and scan data by contacting us.

Contact

If you have questions about this privacy policy, please email us at hello@qree.app.