Last updated on: July 12, 2026

Privacy Policy

How OnestQR collects, uses, and protects your information when you create and manage QR codes.

This Privacy Policy explains how OnestQR ("OnestQR," "we," "us," or "our") collects, uses, shares, and protects information when you visit our website, create QR codes, use our dashboard, or interact with our services (collectively, the "Service").

By using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

1. Who we are

OnestQR provides a web based platform for creating, editing, and managing dynamic QR codes, including scan analytics and related tools. This policy applies to all visitors, Guest users, Member accounts, and Pro subscribers.

2. Information we collect

Information you provide directly

Depending on how you use the Service, we may collect:

  • Account details: name, email address, and password when you register a Member account.
  • Guest access credentials: four secret words chosen during Guest registration. We store a secure hash of these words, not the plain text.
  • QR code content: URLs, labels, design settings, and other data you enter when creating or editing codes.
  • Contact form submissions: first name, last name, email, phone number, how you heard about us, and your message.
  • Billing information: if you subscribe to a paid plan, payment details are processed by our payment provider. We do not store full card numbers on our servers.
  • Support communications: any information you send when contacting us for help.

Information collected automatically

When you use the Service, we may automatically collect:

  • Scan and redirect data: timestamp, approximate location derived from IP address, device type, browser, operating system, and referrer when someone scans a dynamic QR code.
  • Usage data: pages viewed, features used, actions taken in the dashboard, and general interaction patterns.
  • Log data: IP address, browser type, request timestamps, and error logs for security and performance.
  • Cookies and similar technologies: see our Cookie Policy for details.

3. How we use your information

We use the information we collect to:

  • Provide, operate, and maintain the Service, including generating QR codes and redirecting scans.
  • Create and manage Guest and Member accounts, authenticate users, and protect account security.
  • Display scan analytics, dashboards, and usage reports you request.
  • Process subscriptions, send billing receipts, and manage plan limits.
  • Respond to contact form messages and support requests.
  • Send transactional emails such as login codes, account notices, and service updates.
  • Detect, prevent, and address fraud, abuse, security incidents, and technical issues.
  • Improve the Service, develop new features, and understand how users interact with our platform.
  • Comply with legal obligations and enforce our Terms of Service.

4. Legal bases for processing (EEA and UK users)

If you are located in the European Economic Area or the United Kingdom, we process personal data on the following bases:

  • Contract: to provide the Service you request, including account management and QR code functionality.
  • Legitimate interests: to secure the Service, prevent abuse, improve our platform, and communicate about your account, balanced against your rights.
  • Consent: where required for optional cookies or marketing communications. You may withdraw consent at any time.
  • Legal obligation: where we must retain or disclose data to comply with applicable law.

5. How we share information

We do not sell your personal information. We may share information in these limited situations:

  • Service providers: hosting, email delivery, payment processing, analytics, and infrastructure partners who process data on our behalf under contractual safeguards.
  • QR redirect infrastructure: scan events may pass through our redirect and edge network to deliver fast, reliable redirects and aggregate analytics.
  • Legal requirements: when required by law, court order, or government request, or to protect the rights, property, or safety of OnestQR, our users, or others.
  • Business transfers: in connection with a merger, acquisition, or sale of assets, subject to continued protection of your data.
  • With your direction: when you choose to share QR destination content or account data with third parties through the Service.

6. Data retention

We retain personal information for as long as needed to provide the Service, fulfill the purposes described in this policy, and comply with legal obligations. Scan analytics may be retained according to your plan limits and our internal retention schedules. You may request deletion of your account and associated data, subject to exceptions required by law or legitimate business needs such as fraud prevention.

7. Your rights and choices

Depending on your location, you may have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate or incomplete information.
  • Delete your personal information, subject to legal exceptions.
  • Restrict or object to certain processing.
  • Receive a portable copy of your data.
  • Withdraw consent where processing is based on consent.
  • Opt out of marketing emails using the unsubscribe link in those messages.

California residents may have additional rights under the CCPA/CPRA, including the right to know, delete, and correct personal information, and to opt out of the sale or sharing of personal information. OnestQR does not sell personal information.

To exercise your rights, contact us at [email protected]. We may need to verify your identity before responding.

8. Guest accounts and recovery files

Guest accounts rely on four secret access words that you choose at registration. You are responsible for storing your recovery file securely. We cannot restore access if you lose both your secret words and recovery file. We strongly recommend downloading and safeguarding your recovery file in a private location.

9. Security

We implement technical and organizational measures designed to protect personal information, including encryption in transit, access controls, and monitoring for unauthorized activity. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. International transfers

OnestQR may process and store information in countries other than your own. Where required, we use appropriate safeguards such as standard contractual clauses to protect data transferred internationally.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will take steps to delete it.

12. Third party links

QR codes created through OnestQR may redirect users to third party websites or services. We are not responsible for the privacy practices of those destinations. We encourage you to review their policies before sharing personal information.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes may also be communicated through the Service or by email where appropriate. Continued use after changes take effect constitutes acceptance of the updated policy.

14. Contact us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: [email protected]
Website: OnestQR Contact

This Privacy Policy is provided for informational purposes and does not constitute legal advice.