Privacy policy

EUQR is an EU-hosted QR code generator and URL shortener. We are built around data minimisation: we collect as little as possible and never sell your data. All services run in the European Union (Amsterdam).

What we collect

• Account data — your name, email address, and optional organisation name.
• Content you create — short links, dynamic QR codes, and their destinations and settings.
• Billing data — handled by our payment processor, Stripe. We never see or store full card numbers.
• Scan analytics — aggregated, privacy-preserving statistics about scans of your dynamic codes and clicks on your short links.

How scan analytics work (no raw IPs)

We do not store raw IP addresses. To count unique visitors we combine the IP address and user agent with a salt that rotates every day, hash the result with SHA-256, and keep only that hash. The salt is discarded daily, so yesterday's hashes can never be reversed. We also filter out bots and keep only aggregated daily counts beyond your plan's raw-data retention window.

Static QR codes

Static QR codes encode your destination directly. They do not pass through EUQR when scanned, so we receive no data about them at all.

Legal bases

We process account and content data to perform our contract with you, billing data to comply with legal obligations, and aggregated analytics on the basis of our legitimate interest in providing the service you requested.

Sub-processors

We rely on a small number of EU-friendly providers to run the service. See our sub-processors page for the full list.

Your rights

Under the GDPR you may request access to, correction of, export of, or deletion of your personal data, and you may object to certain processing. Contact us and we will respond within the statutory timeframe. You may also lodge a complaint with your local supervisory authority.

Cookies

We use only strictly necessary cookies (your login session and a CSRF security token). We do not use advertising or third-party tracking cookies.

Retention

We keep account and content data for as long as your account is active. Raw scan rows are kept for your plan's retention window; aggregated statistics may be kept longer. When you delete your account, we delete your personal data except where we must retain records for legal reasons (e.g. invoices).

Changes & contact

We will post any material changes to this policy on this page. For privacy questions or to exercise your rights, contact us through the address listed in our imprint.