Last updated August 2026
Your email address, a scrypt hash of your password, your codes and their destinations, and aggregated scan records.
Timestamp, a coarse device/OS/browser classification derived from the user-agent header, the referring site when the browser sends one, and an HMAC of the visitor's IP address salted with a server-side secret. The raw IP address is never written to disk. The hash lets us count unique scans without being able to recover the address.
One cookie, qf_session, and only after you log in. The redirect endpoint sets no cookie at all and runs no third-party script. There is no analytics or advertising tag anywhere on this site.
Scan records are kept for the window your plan allows (30 days on Free, unlimited on paid plans) and are deleted with the code. Delete your account and everything goes with it.
Card payments, when enabled, are processed by Stripe; we never see card details. Hosting is on our own infrastructure.
Export or deletion requests: contact us from your account email and we will action them within 30 days.