Privacy Policy
Last updated: 2026-11-02
1. What We Collect
- Account info: name, email address, and a hashed password (we never store your password itself)
- QR link data: the destination URLs you create and their generated slugs
- Abuse reports: if you report a link, we store the code you reported, your explanation, and your email address if you choose to give one
- Basic server logs (e.g. IP address) used for rate-limiting and abuse prevention
- Free codes made without an account: the destination URL and, in your browser, a cookie holding a random token for the most recent one. The cookie is only used to move that code onto your account if you sign up or sign in, and it expires after 24 hours
- Scan activity: when someone scans one of your QR codes, we record the time, a hashed (not plain-text) version of their IP address, and their browser's user agent string, so you can see how many times a code has been scanned. This applies even to people who don't have an ImmortalQR account themselves, since they're scanning a code someone else created.
2. How We Use It
To operate your account, let you create and manage QR links, and send you account-related email (like password resets). We don't sell your data or share it with advertisers.
3. Third-Party Services
We use the following services to run ImmortalQR. They process data on our behalf and have their own privacy practices.
- A database host, to store account and link data
- Resend, to send account emails such as email verification and password resets
- Upstash, to enforce rate limits; this involves temporarily storing IP addresses
- Sentry, to report errors; error reports can include technical details such as your browser, the page you were on, and your IP address
- Cloudflare Turnstile, to check that sign-ups and free codes come from real people rather than bots
- Google Analytics, to understand how visitors find and use the site (pages viewed, and when someone creates a code or an account). It sets cookies in your browser. We don't send it your name, email address or your codes' destinations
4. Data Retention
We retain account and link data for as long as your account is active. Free codes made without an account stop working after 24 hours unless saved to an account, and are erased 30 days after that. You can delete your account yourself at any time from Settings. Your QR codes stop working immediately and you are signed out everywhere. So that a mistaken or unauthorized deletion can be undone, we keep your data for 30 days; signing in again during that time restores your account and QR codes. After 30 days your account, QR codes and scan history are permanently erased. If you prefer, you can choose to erase everything immediately when you delete your account. Copies may remain for a short time in database backups and in the logs of the services listed above before they are overwritten or expire.
5. Changes
We may update this policy as the service evolves.
6. Contact
Questions about this policy? Reach out to the site owner directly.