Privacy Policy
Last updated: December 25, 2025
Your Privacy Matters
QR Safe is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding your information. We believe in transparency and privacy-first design.
📊 Web Analytics
We use Umami Analytics, a privacy-friendly analytics service that respects your privacy:
✅ What Umami Does NOT Do:
- ❌ No cookies stored on your device
- ❌ No personal information collected
- ❌ No cross-site tracking
- ❌ No unique user identification
- ❌ No data sold to third parties
📈 What We Collect (Anonymously):
- ✅ Page views and visit duration
- ✅ Referral sources (where you came from)
- ✅ Browser type and device (e.g., "Chrome on Mobile")
- ✅ General location (country/city only, IP anonymized)
- ✅ Screen resolution
All data is aggregated and anonymized. We cannot identify individual users or track you across websites.
🔍 QR Code Scanning
When you scan a QR code, we collect minimal data to provide safety assessments and improve our threat detection:
What We Collect:
- The URL extracted from the QR code
- Safety assessment results (safe/caution/dangerous)
- Timestamp of the scan
- Threat indicators detected
- General location (country/city) for threat pattern analysis
How We Use This Data:
- Improve threat detection algorithms
- Identify emerging phishing campaigns
- Generate aggregate statistics on URL safety
- Cache results to improve performance
Your Scan History:
Scan history is stored locally on your device only using browser storage. You can delete your history at any time in Settings.
📷 Camera Access
To scan QR codes, we need access to your device camera. The camera is used exclusively for QR code scanning and runs entirely in your browser. No camera images or videos are uploaded to our servers. All processing happens on your device.
🔗 Third-Party Services
To provide accurate threat detection, we use the following third-party APIs:
Google Safe Browsing API
Checks URLs against Google's database of known malicious sites.
VirusTotal API
Scans URLs against 70+ antivirus engines for comprehensive threat detection.
These services have their own privacy policies. We only send the URL being scanned, not any personal information.
💾 Data Storage & Security
- Location: Data is processed and stored on Cloudflare's global network
- Encryption: All connections use HTTPS/TLS encryption
- Retention: Scan data is cached for up to 24 hours for dangerous URLs, 1 hour for safe URLs
- Access: Only automated systems access this data; no manual review occurs
✋ Your Rights (GDPR/UK DPA)
Under UK and EU data protection laws, you have the following rights:
- Right to Access: Request a copy of data we hold about you
- Right to Erasure: Request deletion of your data
- Right to Object: Object to processing of your data
- Right to Portability: Request your data in a portable format
However, since we don't collect personally identifiable information and don't use cookies, there's minimal data to access or delete. Your scan history stored locally can be cleared anytime in Settings.
🍪 Cookie Policy
🎉 We don't use cookies!
This website does not use any cookies for tracking, analytics, or marketing. We use browser localStorage only to save your preferences and scan history on your device.
👶 Children's Privacy
QR Safe is appropriate for all ages. We do not knowingly collect personal information from children. Since we don't collect personal information from anyone, users of all ages can safely use this service.
📝 Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.
📧 Contact Us
If you have any questions about this privacy policy or our data practices, please contact us:
Email: privacy@qrsafe.app
Project: GitHub Repository
✨ Privacy Summary
✅ What We Do
- • Use privacy-first analytics
- • Anonymize all data
- • Store locally when possible
- • Encrypt all connections
- • Respect your privacy
❌ What We Don't Do
- • Use cookies
- • Track individuals
- • Sell your data
- • Share data with advertisers
- • Require accounts