Privacy Policy

Who this policy covers

• The account holder who buys and configures codes, sets destinations, and checks scan analytics.
• The scanner, who encounters a printed code in the world and scans it. Scanners almost never visit permanentqrcodes.com itself; our redirect passes them straight through to wherever the account holder pointed the code.

Data tied to your account

• Identity and login: name, email, company name if provided, and your authentication details.
• Code configuration: destination URLs, uploaded files, logos and design choices for each code you create.
• Purchase records: what you bought, when, and for how much. Dodo Payments, our payment processor, takes your card details directly at checkout; we never see or store full card numbers.
• Support history: emails and chat messages exchanged with our team.
• On-site behavior: which pages you load and how you move through the dashboard, captured by the analytics tools listed below.

Data generated by a scan

Every scan of a code passes through our redirect, which logs the timestamp, an approximate location derived from IP address, and the scanning device's type, OS and browser. The account holder sees this rolled up as scan counts and trends for their own codes — never as a profile of any individual scanner. We don't build advertising profiles from scan data, run retargeting on it, or sell it to anyone.

What this data is used for

• operating redirects and compiling the scan analytics account holders see;
• processing orders, issuing receipts, and handling refunds;
• responding to support requests;
• catching abuse, such as a code repointed to phishing or malware;
• sending notices about changes to the service or these policies;
• understanding site usage well enough to improve it.

Who else handles it

We hand data to a short list of providers, each scoped to only what their job requires:

• Google: Google Cloud and Firebase host our redirect network and site; Google Analytics measures how the website is used — separate from the scan analytics account holders see about their own codes; Google Fonts serves the typefaces rendered on every page.
• Dodo Payments: processes card payments and checkout.
• Microsoft Clarity: also measures on-site usage, alongside Google Analytics.
• Live chat: a third-party widget carries support conversations.
• Email delivery: providers we use to send receipts and account notices.

Beyond that list, we disclose data only where law requires it, in response to a valid legal request, or to stop fraud or protect someone from harm. We do not sell personal data to anyone, for any reason.

How long we keep it

Account and code data stays with us for as long as your account is open, since your codes depend on it to keep resolving. Close your account and we delete that data, short of what we're legally obligated to retain for tax, accounting or fraud records. Website-analytics data ages out on each analytics provider's own retention schedule, not ours.

How we protect it

Data in transit is encrypted, access to it is controlled, and our hosting providers encrypt what's stored at rest. No setup is unbreakable, and we can't promise that unauthorized access will never happen — only that we've built against it.

Your rights, depending on where you are

If you're in the EU, UK, California or another jurisdiction with its own privacy law, you may be able to access, correct, delete or export your data, and to object to or limit some of what we do with it. California residents can also ask which categories we hold; we don't sell or share personal data for cross-context behavioral advertising.

Email support@permanentqrcodes.com from your account address to exercise any of these. Scanners with questions about scan data can write to the same address. Cookie-level controls are covered separately in our Cookie Policy.

Not built for children

Permanent QR Codes is a business tool for adults. We don't direct it at anyone under 13 and don't knowingly collect data from children that age.