Privacy policy

QRPine collects as little as it can. This page lists everything it keeps, why, and for how long.

Who is responsible

QRPine, a sole proprietorship based in Quebec, Canada, is responsible for the personal information described here. Its privacy officer, the person in charge of protecting personal information, can be reached at support@qrpine.com for any privacy question or request.

The free generator

The free generator works in your browser. The link you type and the logo you add are never sent to QRPine, and no cookie is set. Codes you download do not pass through QRPine when scanned, so we learn nothing about who scans them.

Your account

• Email address and name, to sign you in and to contact you about your plan. The name comes from Google if you sign in with it, and you can change or remove it.
• Google sign-in: your Google account ID, the link to your Google profile picture, and the sign-in tokens Google returns, which are stored encrypted. We ask Google only for your basic profile: name, email address and picture.
• Sign-in codes we email you are stored hashed and expire after 10 minutes.
• Sessions: a session cookie keeps you signed in for up to 30 days. We do not store your IP address or browser with it.
• Abuse protection: to limit repeated sign-in attempts, we keep a count of requests per IP address for each sign-in step.

Your dynamic codes

We store what you set up: each code's link, name, rules, time zone and design, and any logo you upload for it.

Scans of dynamic codes

When someone scans one of your dynamic codes, we record, for your stats:

• the time of the scan;
• the kind of device: iPhone or iPad, Android, or other;
• the country, as estimated by our host from the network;
• which of your redirect rules matched, and the link the scan was sent to;
• a visitor tag, so one phone scanning twice in a day counts as one scanner. It is a one-way hash of the IP address, browser and code, made with a random key that we replace and delete every day.

We do not store the IP address, the full browser details, or any cookie for people who scan. Link previews and crawlers are forwarded but not counted.

Payments

Stripe processes payments as the merchant of record, so your card details go to Stripe and never to us. We keep your Stripe customer ID and your plan's status and renewal date. Stripe handles what you enter at checkout under its own privacy policy.

Who processes your data

• Cloudflare hosts QRPine, its database and uploaded logos, and sends our sign-in emails. Like any host, it handles IP addresses to deliver and protect the site.
• Stripe handles payments and receipts.
• Google, only if you choose to sign in with Google.

These companies may store data outside Quebec and Canada, including in the United States. We do not sell personal information, show ads, or use tracking or analytics scripts.

How long we keep it

We keep your account, codes and scans until you delete your account. Deleting it from Settings removes your account, sessions, codes, their scans and uploaded logos at once. Stripe keeps payment records for as long as the law requires.

Your rights

You can ask to see, correct, export or delete the personal information we hold about you, and withdraw consent where we rely on it. Much of it you can do yourself: change your name in Settings, download your scans as CSV, or delete your account. For anything else, email support@qrpine.com; we answer within 30 days. If you are not satisfied, you can complain to the Commission d'accès à l'information du Québec.

Children

QRPine accounts are not meant for anyone under 14.

Changes

If we change how we handle personal information in a way that matters to you, we email account holders before the change applies.

Last updated October 6, 2026.