Privacy policy

With static codes we don't send links, text, Wi-Fi passwords or WhatsApp numbers to our servers, and we never send scan results. The exceptions are files you choose to upload and smart link destinations, explained below.

Data the tools handle

With static codes, what you enter is used briefly to make or read a QR code on your device. When you open a third-party link, that site's policy applies.

Account

Static codes need no account. Uploading files and making smart links need an account, where we keep your email, your password hashed if you set one, and the date the account was made. You can delete your account with all its codes and files from the account page.

We use Google reCAPTCHA when an account is made, to block automated sign-ups. Google's privacy policy applies to it.

Payment and plans

Card payments in SAR are processed by Moyasar, and the card number is never stored on our servers. We keep the card token Moyasar issues for renewals, the card's last four digits and type, and a record of each successful or failed payment with its amount, date and failure reason.

Payments in USD are processed by Lemon Squeezy, and card details don't reach us. We keep the subscription number and a record of each payment with its amount and date.

Smart links

A smart link goes through our servers before reaching its destination, so we keep the destination you set and count views.

Uploaded files

When you upload an image, video or PDF, we store it on our servers and make a public page for it that the code opens.

Anyone who scans the code or has the page link can see the file. We don't let search engines index these pages, but we can't stop someone with the link from sharing it. Uploaded files are not private and not encrypted by us, and our team may view them after a report or to check they follow the terms of use. Don't upload private or confidential content.

A code that isn't paid for is deleted with its file after 24 hours. If a plan ends without payment, its codes stop, and we may delete the stopped account with its files. We may delete files of stopped codes after some time, and any file without notice if it breaks the terms of use or is reported. After deletion we keep an upload record (without the file) for up to 12 months for security and abuse prevention.

To delete a file, delete it from My codes, or contact us from the support page with the page link.

Reports

When you report content, we record the reason to review it.

Analytics

We use analytics tools such as Mixpanel to understand page performance and usage. This can include the current page, the referring site, browser, device and operating system, and events such as making a code, uploading a file or opening a file page, never the file's content. When you're signed in, we link these events to your account and send your email to Mixpanel to make a user profile.

Images and camera

Logo images, the camera and scanned images are used in the browser only and are never uploaded. You can turn off camera access in your browser or device settings.

Changes

We may update this policy. The current text is always on this page.

The Arabic version applies if the two differ.