Privacy

Free codes never reach us

When you make a static code, everything happens in your browser. The link, Wi‑Fi password, contact details or text you type is turned into the pattern on your device and is never sent to our servers. We don’t log it and we can’t see it. Your design choices are remembered in your browser’s local storage for convenience; clear it any time.

Counting free downloads

To enforce one free download a day, your browser stores a small counter (the date and a number) in local storage. Our server also keeps a daily count against a one-way, salted hash of your network address, never the address itself, and deletes it after a day. Neither includes what your code contains.

If you create an account

• Email address, to send sign-in links and receipts. We don’t use passwords.
• Your dynamic codes and hosted pages: titles, destinations, menu and page content, and files you upload.
• Billing is handled by Stripe. We store your Stripe customer id and plan status, never card numbers.
• A session cookie that keeps you signed in for up to 30 days. It’s the only cookie we set, and it’s essential, so there’s no banner.

Scan statistics for dynamic codes

When someone scans a dynamic code we record the time, a rough device type (iPhone, Android, desktop), the country from our host’s network headers, and the referring site if there is one. We don’t store IP addresses. To estimate unique visitors we keep a one-way hash of the IP address and browser, salted with the date, and delete it after two days. Scan records are kept for 13 months.

Event replies

If you reply to an event page, your name, email and note go to the person who made the page. They’re responsible for how they use them. Replies are deleted when the page is deleted.

Who we share data with

• Our hosting and database providers, to run the service.
• Stripe, to take payments.
• Our email provider, to send sign-in links.

We don’t sell data and we don’t run advertising trackers.

How long we keep things

Unused sign-in links expire after 20 minutes. If a paid plan ends, dynamic codes keep redirecting for 12 months and hosted pages stay online for 30 days. Delete any code or page from your dashboard and it’s removed straight away, along with its scan history.

Your rights

You can ask for a copy of your data, a correction, or deletion of your account at hello@qrhippo.online. We reply within 30 days.