Privacy policy

QRPine collects as little as it can. This page lists everything it keeps, why, and for how long.

Who is responsible

QRPine, a sole proprietorship based in Quebec, Canada, is responsible for the personal information described here. Its privacy officer, the person in charge of protecting personal information, can be reached at support@qrpine.com for any privacy question or request.

The free generator

The free generator works in your browser. The link you type and the logo you add are never sent to QRPine, and no cookie is set. Codes you download do not pass through QRPine when scanned, so we learn nothing about who scans them.

Visits to the site

To count visits to our pages, we use Cloudflare Web Analytics. It sets no cookie, stores nothing in your browser, and does not follow you across sites. It reports totals: which pages were viewed, the site you came from, the kind of browser and device, the country, and how fast pages loaded. It is not used for visitors in the European Union, or on the pages people reach by scanning a dynamic code.

We also count a few actions on our pages: downloading or copying a code, and clicking to make a dynamic code. Each count records the action, the page, the style preset used, and the country of your network. It holds no cookie, IP address or link, and nothing that tells one visitor from another. The counts are stored with Cloudflare.

Your account

• Email address and name, to sign you in and to contact you about your plan. The name comes from Google if you sign in with it, and you can change or remove it.
• Google sign-in: your Google account ID, the link to your Google profile picture, and the sign-in tokens Google returns, which are stored encrypted. We ask Google only for your basic profile: name, email address and picture.
• Sign-in codes we email you are stored hashed and expire after 10 minutes.
• Sessions: a session cookie keeps you signed in for up to 30 days. We do not store your IP address or browser with it.
• Abuse protection: to limit repeated sign-in attempts, we keep a count of requests per IP address for each sign-in step.

Your dynamic codes

We store what you set up: each code's link, name, rules, time zone and design, and any logo you upload for it.

Scans of dynamic codes

When someone scans one of your dynamic codes, we record, for your stats:

• the time of the scan;
• the kind of device: iPhone or iPad, Android, or other;
• the country, as estimated by our host from the network;
• which of your redirect rules matched, and the link the scan was sent to;
• a visitor tag, so one phone scanning twice in a day counts as one scanner. It is a one-way hash of the IP address, browser and code, made with a random key that we replace and delete every day.

We do not store the IP address, the full browser details, or any cookie for people who scan. Link previews and crawlers are forwarded but not counted.

Payments

Stripe processes payments as the merchant of record, so your card details go to Stripe and never to us. We keep your Stripe customer ID and your plan's status and renewal date. Stripe handles what you enter at checkout under its own privacy policy.

Who processes your data

• Cloudflare hosts QRPine, its database and uploaded logos, sends our sign-in emails, and counts page visits. Like any host, it handles IP addresses to deliver and protect the site.
• Stripe handles payments and receipts.
• Google, only if you choose to sign in with Google.

These companies may store data outside Quebec and Canada, including in the United States. We do not sell personal information, show ads, or use advertising or cross-site tracking.

How long we keep it

We keep your account, codes and scans until you delete your account. Deleting it from Settings removes your account, sessions, codes, their scans and uploaded logos at once. Stripe keeps payment records for as long as the law requires.

Your rights

You can ask to see, correct, export or delete the personal information we hold about you, and withdraw consent where we rely on it. Much of it you can do yourself: change your name in Settings, download your scans as CSV, or delete your account. For anything else, email support@qrpine.com; we answer within 30 days. If you are not satisfied, you can complain to the Commission d'accès à l'information du Québec.

Children

QRPine accounts are not meant for anyone under 14.

Changes

If we change how we handle personal information in a way that matters to you, we email account holders before the change applies.

Last updated October 8, 2026.