Privacy Policy

1. Who we are

QR Base ("we", "us") provides QR code generation, hosting and analytics at qr-base.com. This policy explains what personal data we collect, why, and what rights you have over it.

2. Data we collect from account holders

• Account data — name, email address, hashed password, and profile image if you upload one.
• Billing data — plan, subscription status and transaction history. Card details are handled by our payment processor and never touch our servers.
• Content you create — the QR codes, destination URLs, designs and files you upload.
• Support correspondence — messages you send us.

3. Data we collect when someone scans a QR code

Dynamic QR codes route each scan through our servers so we can count and analyse it. For each scan we record:

• IP address, and the approximate country/city derived from it (via a local MaxMind GeoLite database — the IP is not sent to a third party for this)
• Device type, operating system and browser, derived from the user-agent string
• The QR code scanned, and the date and time

This data is shown to the owner of that QR code in aggregate form. We do not use it to build advertising profiles, and we do not sell it.

If a QR code owner has configured a third-party retargeting pixel (for example Meta or Google), that provider will also receive the scan event under their privacy policy. The owner of the QR code is the controller of that choice.

4. Why we process this data (legal bases)

• Contract — to give you the service you signed up for.
• Legitimate interests — to keep the service secure, prevent abuse and fraud, and produce the analytics that are the core of the product.
• Legal obligation — to keep tax and accounting records.
• Consent — for marketing emails, which you can withdraw at any time.

5. How long we keep it

Account data is kept while your account is open. Scan records are subject to an automatic retention job and are deleted once they pass the retention window for your plan. Deleting your account removes your account data and your QR codes; billing records are retained where tax law requires it.

6. Who we share it with

We use a small number of processors to run the service: our hosting provider, our payment processor, and our transactional email provider. They may only process data on our instructions. We do not sell personal data to anyone.

7. Cookies

We use cookies that are strictly necessary for the service: session and authentication cookies, a CSRF token, and — if you arrive through a referral link — a referral attribution cookie that lasts 30 days.

8. Security

Passwords are hashed. Traffic is served over HTTPS. Optional two-factor authentication is available on your account, and we recommend enabling it.

9. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to processing, or to complain to your data protection authority. To exercise any of these, email amplycoindustries@gmail.com.

10. Children

The service is not directed at children under 16 and we do not knowingly collect their data.

11. Changes

We will update the date at the top of this page when this policy changes, and notify account holders by email of material changes.

12. Contact

Questions or requests: amplycoindustries@gmail.com.