Privacy
What QRzoo stores, why, and for how long.
Who we are
QRzoo (qrzoo.com) is operated by Itzco Dev (Blue Pineapple Ocean Corp), the British Virgin Islands. You can reach us at support@qrzoo.com.
What we store
| Data | Why | How long |
|---|---|---|
| Email address | Sign-in by email link or code, and account identification. | Until you delete your data; a sign-in link expires after 15 minutes. |
| Your page (address, name, subtitle) | To show your page at qrzoo.com/your-name to anyone who opens it or scans it. | Until you delete it. After a rename or "Delete my data" the old address stays reserved for your account for 90 days (only the address and an internal account id, so nobody else can take over links and QRs you shared). |
| Your QRs (the handles, numbers, addresses, links, WhatsApp message and contact card you add) | To show them on your page as QRs, publicly, and to build your contact card file. | Until you remove them or delete your data. |
| Your page's look and home-screen icon (the look, the icon you chose, and the icon images your browser draws from it) | To show your page in its look and give it your icon when you install it on your phone. | Until you change them or delete your data; replaced icon images are deleted when new ones are saved. |
| Usage counter (how many QRs your page has) | To apply the page's maximum of QRs. | Until you delete your data. |
| API keys (stored hashed) and connected AI apps | To let your scripts and AI assistants act on your page. | Until you revoke them or delete your data. |
Your QRzoo account is your email address, your sign-in sessions on qrzoo.com, your API keys and the AI apps you connect.
Who processes it
- Cloudflare hosts the service, stores the data listed above and sends the sign-in emails.
- PostHog receives product analytics, error reports and service logs: page views and button clicks on this website, and what happens in QRzoo (for example "a code was created" or "a sign-in email failed"), under a pseudonymous id. It never receives your email address, your IP address, the content you create or your sign-in links. The website uses it without cookies.
Cookies
We set a session cookie when you sign in, and a short-lived cookie while you sign in. We do not use advertising or tracking cookies.
What we do not do
We do not sell personal data and do not share it with advertisers.
Your choices
You can delete your QRzoo data yourself from your account page (Delete my data): it removes everything listed above, your API keys, connected AI apps and sessions. To get a copy of your data, or to also erase the email address you sign in with, write to support@qrzoo.com. We answer within 30 days.
Changes
If this policy changes, the date at the top changes too. For changes that affect how your data is used, we email account holders first.