Privacy Policy

Introduction

CloudQR ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our dynamic QR code management service.

Information We Collect

Account Information

When you create an account, we collect your email address and a securely hashed version of your password. We never store your password in plain text.

Google OAuth Authentication

If you choose to sign up or log in using Google OAuth, we receive your email address and profile information (such as your name) from Google. We use this information solely for authentication purposes and to create your CloudQR account. We do not have access to your Google password. Your use of Google OAuth is subject to Google's Privacy Policy, which can be found at https://policies.google.com/privacy.

QR Code Data

We store the QR codes you create, including the destination URLs, custom codes, and optional titles you provide.

Usage Data

We may collect information about how you access and use our service, including your IP address, browser type, and access times for security and service improvement purposes.

Analytics and Tracking

Google Analytics

We use Google Analytics to understand how visitors use our service and to improve our marketing efforts. Google Analytics collects information such as how often users visit our site, what pages they visit, and what other sites they used prior to coming to our site. Google Analytics uses cookies and similar technologies to collect this information. The information generated about your use of the service is transmitted to and stored by Google on servers in the United States.

This data is used solely for marketing analytics purposes to help us understand user behavior, improve our service, and optimize our marketing campaigns. You can opt-out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on, available at https://tools.google.com/dlpage/gaoptout.

For more information on how Google uses data, please visit https://policies.google.com/technologies/partner-sites.

How We Use Your Information

• To provide, maintain, and improve our QR code management service
• To authenticate your account and provide secure access
• To track QR code usage and provide analytics
• To communicate with you about service updates or issues
• To protect against unauthorized access or abuse of our service
• To analyze usage patterns and improve our marketing efforts through Google Analytics

Bot Protection

We use Google reCAPTCHA v3 to protect our registration forms from automated bot signups. reCAPTCHA analyzes user interactions to determine whether the user is human or automated. This process is invisible to most users. reCAPTCHA is subject to Google's Privacy Policy and Terms of Service. For more information, visit https://www.google.com/recaptcha.

Cookies and Session Management

We use HttpOnly, Secure cookies to maintain your login session. These cookies are essential for the service to function and contain a JWT token that authenticates your requests. We do not use tracking cookies or third-party advertising cookies.

Data Storage and Infrastructure

Cloudflare Services

We use Cloudflare's infrastructure to host our application and store your data. This includes Cloudflare Workers for our backend API and Cloudflare D1 database for data storage. All your account information, QR codes, and associated data are stored securely on Cloudflare's infrastructure.

Cloudflare may process your data as a data processor on our behalf to provide hosting, content delivery network (CDN), and security services. Cloudflare maintains industry-standard security measures and certifications. For more information about Cloudflare's data handling practices, please visit https://www.cloudflare.com/privacypolicy/.

Your data remains encrypted in transit and at rest. We implement strict access controls to ensure that only authorized personnel can access your information when necessary for service operations.

Data Security

We implement industry-standard security measures to protect your data, including:

• PBKDF2-SHA256 password hashing with per-user random salts
• Secure, HttpOnly cookies for session management
• HTTPS encryption for all data transmission
• Regular security audits and updates
• Cloudflare's enterprise-grade security infrastructure and DDoS protection

Data Sharing and Disclosure

We never sell, trade, rent, or otherwise monetize your personal information. Your data is yours, and we are committed to keeping it that way. We may share your information only in the following limited circumstances:

• With your explicit consent
• With trusted service providers (such as Cloudflare) who assist us in operating our service, under strict confidentiality agreements and only to the extent necessary to provide the service
• To comply with legal obligations or respond to lawful requests from authorities
• To protect our rights, property, or safety, or that of our users

Your Rights

You have the right to:

• Access, update, or delete your account information
• Export your QR code data
• Delete your account and associated data at any time
• Opt out of non-essential communications
• Opt out of Google Analytics tracking using browser extensions or settings

Data Retention

We retain your account information and QR code data for as long as your account is active. If you delete your account, we will delete your data within 30 days, except where we are required to retain it for legal purposes.

Third-Party Services

Our service integrates with the following third-party services, each of which has its own privacy policy:

• Google OAuth: For authentication (Privacy Policy)
• Google Analytics: For usage analytics and marketing insights (Privacy Policy)
• Google reCAPTCHA: For bot protection (Privacy Policy)
• Cloudflare: For hosting and infrastructure (Privacy Policy)

We encourage you to review the privacy policies of these third-party services to understand how they handle your data.

Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at [email protected].