What information QrCodeTrack collects, why, and the choices you have.
Effective date: 21 October 2026
This policy explains what information QrCodeTrack ("QrCodeTrack", "we", "us") collects when you use qrcodetrack.com and app.qrcodetrack.com (the "Service"), why we collect it, and the choices you have. If you have a question about it, email sales@qrcodetrack.com.
1. Who this policy covers
It covers three groups of people:
- Account holders: people who sign up to create short links, QR codes, bio pages and other content.
- Visitors to our content: people who open a short link, scan a QR code or view a bio page, vCard, event, file or static site that an account holder created.
- Website visitors: people who browse our website without signing in.
2. Information we collect from account holders
- Account details: your name, email address and password. Passwords are stored only as a one-way hash, and we cannot read them.
- Settings: your language, time zone, theme and other preferences, plus two-factor authentication details if you turn it on.
- Sign-in and security records: when you sign up, sign in or make account changes, we record your IP address, approximate location (continent, country and city), device type, operating system, browser and browser language. Sign-in records are deleted automatically after 90 days.
- Content you create: links, QR codes, bio pages, uploaded files, vCards, events, static sites, splash pages, custom domains, projects and tracking-pixel settings.
- Messages: what you send us when you contact us.
3. Information we collect when someone uses your links and QR codes
When a visitor opens a short link, scans a QR code or views a page hosted on the Service, we record:
- approximate location (continent, country and city), worked out from the visitor's IP address;
- device type, operating system, browser and browser language;
- the referring website, and any UTM campaign tags in the link;
- the date and time, and whether the visit is a repeat visit.
We use the IP address to work out the location, but we do not store it with these statistics. The statistics are shown to the account holder who owns the link or code.
Account holders can add third-party tracking pixels (for example Facebook, Google Analytics, Google Tag Manager, LinkedIn, Pinterest, Quora, TikTok, X or Snapchat) to their links and pages. When they do, those providers may collect information about visitors under their own privacy policies. The account holder who added the pixel is responsible for using it lawfully, including getting any consent it requires.
If you visited a link or page created by one of our users and have a question about your data, contact the owner of that link first. You can also contact us, and we will help where we can.
4. Cookies and similar technologies
We use cookies that the Service needs to work:
- to keep you signed in, and to remember you if you choose "Remember me";
- to remember your language, light or dark theme, and similar preferences;
- to count page views without counting the same visitor twice;
- to protect forms against abuse.
We do not use advertising cookies of our own. Some pages load services from Google: reCAPTCHA on sign-in, sign-up and some forms (to block automated abuse), and Google Fonts. When those load, Google receives your IP address and browser information under Google's Privacy Policy.
5. How we use information
- to create and run your account, and to provide the features you use;
- to show you statistics for your links, QR codes and pages;
- to send service emails, such as account confirmation, welcome messages, password resets and important notices. We send newsletters only if you agree to receive them;
- to keep the Service secure: to prevent fraud, spam, phishing and malware, and to enforce our Terms of Service;
- to understand how the Service is used, so we can fix problems and improve it;
- to meet legal obligations.
We handle personal information in line with Egypt's Personal Data Protection Law (Law No. 151 of 2020) and, where they apply to you, other data-protection laws such as the EU GDPR. We rely on these legal bases: the contract with you (providing the Service), our legitimate interests (security, abuse prevention and improving the Service), your consent (where we ask for it), and legal obligations.
6. Who we share information with
We do not sell personal information. We share it only:
- with service providers that help us run the Service, such as hosting, email delivery and Google reCAPTCHA, who may use it only to provide their service to us;
- with the account holder who owns a link or page, in the form of visit statistics, as described in section 3;
- when the law requires it, or when it is needed to protect the rights, safety or property of our users, the public or QrCodeTrack;
- with a buyer or successor if QrCodeTrack is involved in a merger, acquisition or sale of assets. This policy will continue to apply to your information.
7. How long we keep information
- Account details and content are kept while your account is open.
- Sign-in and security records are deleted after 90 days.
- Visit statistics are kept for as long as your plan allows, or until you delete the link, code or page, or reset its statistics.
- When you delete your account, we delete your account details and content. Copies in backups are overwritten in the normal backup cycle. We may keep limited records where the law requires it.
8. Your choices and rights
You can view and update most of your information under Account once signed in, and you can delete your account there at any time. Depending on where you live, you may also have the right to:
- get a copy of your personal information;
- have inaccurate information corrected;
- have your information deleted;
- object to or restrict some processing;
- withdraw consent you have given;
- complain to a data-protection authority: in Egypt, the Personal Data Protection Center; elsewhere, your local authority.
To make a request, email sales@qrcodetrack.com from the address on your account. We will reply within 30 days.
9. Security
We protect information with encrypted connections (HTTPS), hashed passwords, optional two-factor authentication, limits on repeated sign-in attempts, and restricted access to our servers. No online service can be completely secure, so please use a strong, unique password and turn on two-factor authentication.
10. International transfers
Our servers and service providers may be in a different country from you. When we transfer information across borders, we take steps to make sure it stays protected as this policy describes.
11. Children
The Service is not meant for children under 16, and we do not knowingly collect their personal information. If you believe a child has given us personal information, email us and we will delete it.
12. Changes to this policy
We may update this policy as the Service changes. We will change the effective date above. If a change is significant, we will also let account holders know by email or in the app before it takes effect.
13. Contact
QrCodeTrack: sales@qrcodetrack.com