Information We Collect
Account Information
When you create an account or sign in using Google OAuth, we collect:
- Name and email address - provided via Google OAuth
- Profile picture - from your Google account (optional)
- Account preferences - language, notification settings
Usage Data
We automatically collect information about how you use our service:
- QR codes created - content, design, and destination URLs
- Scan analytics - scan counts, locations, devices (anonymized)
- Feature usage - which tools you use and how often
- Device information - browser type, operating system
- IP address - for rate limiting and security
Cookies and Local Storage
We use cookies and browser local storage to:
- Maintain your login session
- Remember your preferences
- Provide essential functionality
How We Use Your Information
We use the information we collect to:
- Generate QR codes - create, customize, and manage your QR codes
- Provide analytics - track scans, generate reports
- Manage your account - authentication, preferences, subscriptions
- Improve our service - analyze usage patterns, develop features
- Send notifications - service updates, scan alerts (if enabled)
- Process payments - manage subscriptions through Stripe
Data Storage and Security
Your data is stored securely using Amazon Web Services (AWS) infrastructure:
- Encryption in transit - All data transmitted using TLS/HTTPS
- Encryption at rest - Data stored with AES-256 encryption
- Access controls - Strict authentication and authorization
- Regular backups - Automated backups for data recovery
- US-based servers - Data stored in AWS US-East-1 region
Data Retention
QR code data and analytics are retained as long as your account is active. You can delete individual QR codes or request full account deletion at any time.
Third-Party Services
We use trusted third-party services to operate QR Cheetah:
Stripe (Payment Processing)
Stripe processes all payments securely. We never store your credit card information. Stripe's privacy policy: stripe.com/privacy
Google OAuth (Authentication)
We use Google for secure sign-in. Google's privacy policy: policies.google.com/privacy
Web3Forms (Contact Forms)
Contact form submissions are processed through Web3Forms. Their privacy policy: web3forms.com/privacy
We Do Not Sell Your Data
We never sell, rent, or share your personal information with third parties for marketing purposes.
Cookies and Tracking
We use the following types of cookies:
- Essential cookies - Required for authentication and core functionality
- Preference cookies - Remember your settings and preferences
- Analytics cookies - Help us understand how users interact with our service
You can control cookies through your browser settings. Disabling essential cookies may affect service functionality.
Your Data Rights
You have the following rights regarding your personal data, regardless of your location:
- Access - Request a copy of your personal data
- Correction - Request correction of inaccurate data
- Deletion - Request deletion of your account and data
- Export - Request your data in a portable format
- Restriction - Request limitation of processing your data
- Objection - Object to certain processing of your data
- Withdraw Consent - Withdraw consent for data processing at any time
How to Exercise Your Rights
Submit a data rights request using our secure form:
You may also contact us at privacy@qrcheetah.com.
Response Timeframes
- GDPR (EU/EEA/UK): We will respond within 30 days
- CCPA (California): We will respond within 45 days
- All other regions: We will respond within 30 days
We may need to verify your identity before processing your request. We will never charge a fee for standard data rights requests.
Regional Privacy Rights
EU/EEA & UK (GDPR / UK GDPR): We process your data based on consent, legitimate interests, and legal obligations. You may lodge a complaint with your local data protection authority.
California (CCPA/CPRA): You may request to know what personal information is collected, request deletion, and opt-out of sale. We do not sell personal information.
Mexico (LFPDPPP): You have ARCO rights (Access, Rectification, Cancellation, Opposition). We respond within 20 business days.
Spain (LOPDGDD): You have rights under Spain's data protection law. You may lodge a complaint with the AEPD.
Children's Privacy
QR Cheetah is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Posting the updated policy on this page
- Updating the "Last Updated" date
- Sending an email notification for material changes
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us: