Know what you share.
This page explains the information QRnestly uses to provide accounts, document sharing, subscriptions and analytics.
For privacy questions or requests, contact mrshop051@gmail.com.
Your account and sign-in
We keep your name, email address, account identifier and account creation date to provide your workspace and subscription access. Passwords are stored as salted password verifiers, not as readable passwords. If you choose Google sign-in, we receive your Google account identifier, name and verified email address to sign you in. Google access tokens are not retained.
Sign-in uses a cookie that expires after seven days. Signing out revokes that session. Google sign-in also uses a temporary cookie, lasting up to ten minutes, to complete the sign-in process. Security checks use hashed network-address and sign-in-identity values to limit repeated login attempts.
QR content and uploaded files
We store the QR codes you save, their settings, destination addresses and content, so you can manage them. Uploaded documents and media are stored with their original filename, your account identifier and the upload date.
Uploaded file links are shareable, not private storage. Anyone who obtains a file link can open it. Do not upload confidential documents or personal information you do not intend to share. A destination on another website is subject to that website's privacy practices.
Scan analytics
When a dynamic code is opened, we count the request and group it by day, approximate country, device category and operating system. The code owner can view these summaries. Country is estimated using a local IP-location database; the network address is not sent to an external location-lookup service.
Raw IP addresses and complete browser user-agent strings are not stored in the scan analytics database. These statistics count requests rather than unique people and may include repeat visits or automated previews.
Website and product measurement
We count visits to selected public pages and trial-button clicks by page, channel and campaign. These counts do not use analytics cookies, browser storage or visitor identifiers. We do not retain full page addresses, referrer addresses, IP addresses or browser user-agent strings in these marketing counts.
For registered accounts, we record the first registration, first saved dynamic code, first checkout and first paid invoice, together with limited campaign attribution when present. This helps us understand whether people can get started and become customers. Test payments are kept separate from real purchases. These records are available to the service operator, not other customers.
Optional advertising measurement
If you choose "Allow measurement", we load Google's advertising tag to understand which ads lead to first-time paying customers. Google may receive browser and network information, page and ad-click information, and the value and currency of your first verified purchase with an opaque transaction reference. We do not send your name, email address, QR content or payment-card information in this conversion event. Advertising personalisation is disabled.
The tag may use first-party advertising cookies and Google's existing cookies according to your choices and Google's settings. No Google advertising tag is loaded before you opt in. You can decline without affecting your account and change your choice through "Privacy choices". We store your choice in this browser for up to 180 days and a local conversion-deduplication marker for up to seven days. Browser privacy signals keep measurement off.
Withdrawal stops future measurement on this site; information already received by Google is governed by Google's privacy practices for partner sites.
Payments and service providers
Stripe handles checkout and subscription billing. QRnestly stores Stripe customer and subscription identifiers, plan, billing status and relevant transaction identifiers; payment-card details are entered with Stripe. See Stripe's privacy policy for its handling of payment data.
Amazon Web Services hosts the service and uploaded files. If you choose Google sign-in, Google also processes the sign-in request under Google's privacy policy. Hosting, sign-in and payment providers process technical information needed to deliver and secure their services.
Keeping and removing information
Saved account and content records remain available for your workspace until they are removed. Deleting a QR code removes its saved record and associated scan statistics. It does not delete uploaded files. Replaced uploads do not expire automatically, and copies already downloaded by recipients remain outside our control.
Public-page and trial-click counts are kept for 90 days. Account-linked product milestones are retained with the account and removed when its account record is deleted. Session access expires after seven days; expired session and sign-in security records are cleaned during subsequent sign-in activity.
For account or file removal, or to request a copy or correction of your information, email mrshop051@gmail.com from your account email. We may need to verify the request before changing account data.
Your choices
You can choose whether to use Google sign-in, remove saved QR codes and sign out of your session. You can also clear cookies in your browser, which signs you out. Depending on the law that applies to you, you may have rights to access, correct, erase or obtain a copy of your information, restrict or object to processing, and complain to a data-protection authority.
For help with sharing or replacing a document, visit Support.