Privacy policy
Effective October 13, 2026. FutureQR is operated by Syed Naqvi, California, USA. Questions: hello@futureqr.app.
What we collect
- Account: your email and a hash of your password (never the password itself). If you turn on two-factor, its secret and hashed recovery codes.
- Your codes: the name, destination link and design you choose.
- Scans of your codes: time, approximate place (country, state, city, worked out by Cloudflare from the network) and device type (for example iPhone or Desktop). We do not store the scanner's IP address or any identity. To count unique scanners, each scan also gets a one-way code made from that day, the network address and browser type; it cannot be turned back into an address and changes every day, so the same person cannot be followed from one day to the next.
- Site visits: daily counts by approximate place. No individual visit is stored.
- Payments: Stripe collects your card and billing details. We receive only your plan, its status and the last 4 digits of the card.
What we do not do
- No ads and no advertising trackers.
- We do not sell or share your personal information.
- Static codes made on the homepage are built in your browser. We never see those links.
Cookies
One sign-in cookie, only after you sign in. No tracking cookies.
Services we use
- Cloudflare: hosting, database and short-link redirects.
- Stripe: payments.
- Resend: account emails such as password resets.
- jsDelivr: delivers the open-source code that draws and tests QR codes in your browser.
How long we keep it
Detailed scan records are kept for 12 months, then deleted. Total scan counts stay with the code. Account data stays until you ask us to delete your account.
Your choices
Email hello@futureqr.app from your account email to get a copy of your data or delete your account. We do it within 30 days. California residents have these rights under the CCPA, and we give them to everyone.
Changes
If this policy changes in a way that matters, we will email account holders before it takes effect.