QRSalt privacy & data

we are the controller

Your email address, and a name if you give one.

the device type, operating system family and browser family

an approximate location: country, region, city and a position rounded to about 11 km, as reported by Cloudflare

the referring site, when there is one

We receive and keep the plan, price, billing interval, status, dates and Whop's reference numbers

Running your account, serving your codes and pages, taking payment, service email

Security, rate limiting, bot checks, destination checks, image moderation, abuse handling, security records, technical logs and backups

Ad measurement and analytics cookies, reporting sign-ups and purchases to Google (including the hashed email), and keeping the ad click identifier

Individual scan events 30 days, after they have been added to daily totals, then deleted

Page and menu visitor hashes Two days at most

Your account, content, codes and destination history Until you delete them or your account (see section 10)

The service runs on a server in New York

We rely on the European Commission's Standard Contractual Clauses in our contracts with those providers

and on the EU–US Data Privacy Framework for providers that are certified under it.

The full list, with what each handles and where, is on the sub-processor page

under our data processing agreement

You can delete your account from Settings.

get a copy of your data, and take it elsewhere in a machine-readable format

correct it: change it in the dashboard, or email us

delete it: delete individual items, or your whole account from Settings

restrict our use of it while a complaint is looked into

object to anything we do on the basis of legitimate interests

withdraw consent to ad measurement and analytics, as easily as you gave it, in Cookie settings

When ad measurement is on, the Google tag (Google Ads and Google Analytics)