Privacy Policy

Last updated: 2026

This Privacy Policy explains how ReusableQR (ReusableQR) ("we", "our", "us") collects, uses, and protects information when you use our website, dashboard, and QR code services.

This document is provided for product clarity and does not constitute legal advice. You should customize and review it with a qualified legal professional, especially for your jurisdiction and any specific regulatory obligations (for example GDPR, CCPA, or sector-specific rules).

1. What ReusableQR Does

ReusableQR lets you create dynamic QR codes whose destination URLs you can update later without re-printing the physical code. We also provide simple scan analytics and design customization options.

  • You create an account using your email and password (managed by Supabase authentication).
  • You create QR codes with destination URLs, optional titles, and visual styling.
  • When someone scans your QR code, we redirect them to the stored destination URL and increment an aggregate scan counter.
  • You can update or delete your QR codes through the dashboard at any time.

2. Information We Collect

Based on the current implementation of the app, we collect and store the following categories of information:

2.1. Account Information

  • Email address you provide when signing up or signing in.
  • Password is handled by Supabase, our authentication provider. We do not store plaintext passwords in our own application code; authentication is managed via secure Supabase APIs and hashed credentials.
  • Authentication session information is stored in cookies so you can stay logged in.

2.2. QR Code Content and Configuration

  • Destination URLs for each QR code (for example, your website, menus, landing pages).
  • Optional titles that you assign to QR codes to identify them in your dashboard.
  • Design/styling options stored for each QR code, such as dot color, background color, dot and corner styles, and optional logo URL.
  • Generated QR images in PNG and SVG format, which we store so you can download and reuse them.

2.3. Usage and Analytics Data

We collect comprehensive analytics data when someone scans your QR codes to help you understand usage patterns. This data is privacy-protected and anonymous:

  • Scan timestamps - When each scan occurred
  • Geographic location (from IP address) - Country, city, region, and timezone. Coordinates are rounded to approximately 5km precision for privacy.
  • Device information (from User-Agent) - Device type (mobile/desktop/tablet), operating system, browser, and versions
  • Hashed IP address - IP addresses are immediately hashed using SHA-256 before storage. Original IP addresses are never stored.
  • Visitor identifiers - A hash of IP + User-Agent combination for unique visitor tracking (24-hour window)
  • Language preference - From browser Accept-Language header
  • Referrer - Where the scan came from (if available)

Important: We do NOT collect or store names, emails, exact IP addresses, precise location data, or any personally identifiable information about people who scan QR codes. No cookies or tracking scripts are placed on scanners' devices.

2.4. Technical and Log Data

Our hosting providers and Supabase may log technical data automatically, such as:

  • IP address and basic request metadata
  • Browser type, operating system, and device information
  • URLs requested, response codes, and error logs

These logs are used primarily for security, debugging, and service reliability.

2.5. Third-Party Services

We use third-party services to provide analytics functionality:

  • IP Geolocation API (ip-api.com) - Used to convert IP addresses to geographic locations (country, city). IP addresses are sent to this service but are not stored by us.

3. How We Use Your Information

  • To create and manage your account and authenticate you
  • To create, store, update, and delete your QR codes
  • To generate and serve QR images that point to your chosen URLs
  • To provide comprehensive analytics (scan counts, geographic distribution, device types, unique visitors, timeline charts)
  • To secure our services, prevent abuse, and debug technical issues
  • To communicate with you about your account or important changes to the service
  • To improve our service and understand how QR codes are being used (in aggregate, not individual tracking)

4. Cookies and Similar Technologies

The ReusableQR app uses cookies primarily for authentication and essential functionality.

  • Authentication cookies are set by Supabase so you stay logged in as you move between the dashboard and API routes.
  • These cookies are required for core functionality such as viewing and managing your QR codes.
  • Based on the current codebase, we do not use third-party marketing or advertising trackers.

5. Legal Bases for Processing

Where applicable privacy laws require a legal basis (for example in the EU/EEA), we rely on the following:

  • Contract: To provide the service you request (for example, account access, QR code creation, and management).
  • Legitimate interests: To secure our service, prevent abuse, and understand high-level usage (for example, scan counts).
  • Consent: Where required for any optional features or communications that go beyond core service delivery.

6. How We Share Information

We share information only with trusted infrastructure providers that make the service work, and we do not sell your personal data.

  • Supabase for authentication and database storage of QR code data and related metadata.
  • Hosting and infrastructure providers that run the web app and APIs.
  • Service providers who help us operate, improve, or secure the service, under appropriate contractual safeguards.
  • Legal and compliance purposes if we are required to disclose information to comply with law, enforce our Terms of Service, or protect rights, property, or safety.

7. Data Location, Retention, and Security

7.1. Data Location

Data is stored on infrastructure operated by Supabase and our hosting providers, which may be located in different countries. Please adjust this section to reflect your actual hosting regions.

7.2. Data Retention

  • We keep your account information for as long as your account is active.
  • QR code data is stored until you delete the QR codes or your account, subject to any backup and log retention policies.
  • Server and security logs may be retained for a limited and reasonable period for troubleshooting and security.

7.3. Security

  • We use reputable infrastructure providers and modern frameworks (such as Next.js and Supabase) to help secure the service.
  • No online service is 100% secure, and you are responsible for choosing a strong password and keeping your login credentials confidential.

8. Your Choices and Rights

  • You can sign in to update or delete your QR codes
  • You can view detailed analytics for all your QR codes through the dashboard
  • You can export your analytics data in CSV or JSON format at any time
  • You can delete scan history for individual QR codes if needed
  • You can update your account email (if supported in the app UI) or contact us to request changes
  • You may request deletion of your account and associated data (including all QR codes and analytics) by contacting us
  • Depending on your jurisdiction, you may have additional rights such as access, correction, deletion, portability, or objection under laws like GDPR or CCPA

For detailed information about analytics and privacy protections, see our Analytics Guide.

9. Contact and Changes

9.1. Contact

If you have questions about this Privacy Policy or how we handle data, please contact us:

Legal Entity: ReusableQR

Email: support@reusable-qr.com

9.2. Changes

We may update this Privacy Policy from time to time to reflect changes in our service or legal requirements. If we make material changes, we will take reasonable steps to notify you, such as updating the "Last updated" date or providing a notice in the dashboard.

Back to Home.