Privacy
Account and workspace data
QR Kre8or stores your email, display name, account identifier and timezone, together with the codes, destinations, folders, tags, events and preferences you save. We use this information to provide your workspace, sign you in, enforce account access and support your requests.
Companion apps and secure sign-in
The iOS and Android companions sign in to existing accounts. An account-linked device sign-in credential lasts up to 180 days. It is kept in the device's secure storage; the server stores a protected credential reference. Signing out clears the credential from that device and revokes it on the server when connected. Deleting the account revokes its device access.
Account actions and sign-in security records help operate and protect your workspace. The apps do not use an advertising identifier or collect precise device location.
Images, links and team content
Logos you choose to add are stored with your codes and can appear in your published QR images. QR exports are saved on your device and shared with the destination you choose. Copying a link writes it to your clipboard.
Company and Enterprise members can view their team's codes. Code owners select who may edit. Enterprise administrators see summary counts and manage teams; each team's library, folders and tags remain separate. Public short links and hosted QR images are available to people who have their address.
Visits to QR codes and short links
When someone visits a code, we record the visit time, approximate network country, device and browser category, and referring website. A daily protected network-and-device signal helps estimate visitor numbers. Recognized bot previews are excluded from reports. These are visits to published links, not continuous tracking of companion-app activity.
Website analytics
If you allow analytics cookies, Google Analytics measures visits to our public website pages. Companion apps, workspaces, code information and sign-in links are excluded. You can change this choice using Analytics choices in the public website footer.
Ad measurement
If you allow ad measurement on our website, we tell OpenAI when you complete signup, create your first QR code or activate a paid upgrade. We include the event time, an ad-click identifier when available, and the amount and currency of a paid upgrade. We do not send your email, QR content or native app activity.
Choose Ad measurement in the website footer or Account settings to change your choice. Withdrawing consent stops future reporting and removes unsent events. Open ad measurement choices.
Services that process information
Our hosting and Cloudflare process requests and network information to deliver and protect QR Kre8or. Google and Apple process information needed for their sign-in options. Google reCAPTCHA verifies email sign-in and contact submissions to help prevent abuse. Mailtrap processes sign-in emails and contact messages, including the reply details and message you provide. Stripe handles website checkout and billing; the companion apps do not collect payment details or sell plans.
Requests to QR Kre8or and its connected sign-in, verification and mail services use encrypted HTTPS connections.
Retention and account deletion
Workspace information is kept to provide your account and the content you retain. You can manage individual codes and profile settings, or permanently delete your account from Account settings. Account deletion removes personal workspace content and sign-in connections, anonymizes your profile and revokes device access. Content transferred to a Company or Enterprise team stays with that team.
Minimal routing reservations remain for expired links and name-reuse rules. Necessary billing references, account-deletion records and security records may remain to reconcile payments, prevent sign-in replay and protect the service. Service providers also process records needed to deliver and secure their services. Account deletion is not a promise that every payment or security record is immediately erased.
Questions and requests
Use Contact us for privacy questions, account-access problems or help requesting deletion of account data. We may need to verify account ownership before taking action.