Cookie Policy

Last updated: October 8, 2025

How we use cookies to provide and improve our service. Transparent and under your control.

What Are Cookies?

Cookie Definition

Cookies are small text files that are placed on your device (computer, smartphone, or tablet) when you visit a website. They help the website remember your actions and preferences over time.

How We Use Cookies

We use cookies to provide essential functionality, improve your experience, understand how you use our service, and deliver our QR code analytics features. Some cookies are essential for the service to work, while others help us improve and personalize your experience.

Cookie Duration

Cookies can be session cookies (deleted when you close your browser) or persistent cookies (stored for a set period). We use both types depending on the purpose.

Essential Cookies

Authentication Cookies

We use NextAuth session cookies to keep you logged in securely. These cookies are essential for the service to function and cannot be disabled. Cookie name: next-auth.session-token, Duration: Session or 30 days (if 'Remember me' selected).

Security Cookies

CSRF (Cross-Site Request Forgery) protection cookies help protect your account from unauthorized actions. Cookie name: next-auth.csrf-token, Duration: Session.

Preference Cookies

We store your UI preferences such as theme settings, language preferences, and dashboard layout choices. These cookies remember your settings across sessions.

Analytics & Performance Cookies

QR Code Scan Tracking

When someone scans your QR code, we collect analytics data including device type, browser, location, and referrer. This is core functionality of our service and helps you understand QR code performance. This data is stored server-side, not in cookies.

Platform Analytics

We may use analytics tools to understand how users interact with our platform (pages visited, features used, time spent). This helps us improve the service. You can opt out of platform analytics in your account settings.

Performance Monitoring

We collect anonymous performance data (page load times, API response times) to identify and fix technical issues. This data is aggregated and does not identify individual users.

Third-Party Cookies

Google OAuth

When you sign in with Google, Google may set cookies to authenticate your account. These cookies are governed by Google's Privacy Policy. We do not control these cookies.

Stripe Payment Processing

When you manage your subscription or make a payment, Stripe may set cookies for fraud prevention and payment processing. These are governed by Stripe's Privacy Policy.

CDN & Hosting

Our hosting provider (Vercel) may set cookies for performance optimization and DDoS protection. These cookies do not collect personal information.

No Advertising Cookies

We do not use cookies for advertising or tracking you across other websites. We do not sell your data to advertisers or use third-party ad networks.

Managing Cookies

Browser Settings

Most browsers allow you to control cookies through settings. You can block all cookies, accept only certain cookies, or delete cookies after each session. Note that blocking essential cookies will prevent you from using key features like login.

Account Preferences

You can manage analytics preferences in your account settings under Privacy & Data. You can opt out of non-essential analytics while keeping essential functionality.

Do Not Track

We respect Do Not Track (DNT) browser signals for non-essential analytics. However, essential cookies for authentication and security cannot be disabled as they are necessary for the service to function.

Mobile Devices

Mobile browsers have similar cookie controls. Check your browser's settings menu for privacy options. You can typically find these under Settings > Privacy or Settings > Safari/Chrome.

Impact of Blocking Cookies

Essential Cookies Blocked

If you block essential cookies, you will not be able to: log in to your account, create or manage QR codes, access your dashboard, use API features, or manage your subscription. The service will essentially not function.

Analytics Cookies Blocked

If you block analytics cookies, you can still use all features, but we won't be able to understand how you use the platform or personalize your experience. Your QR code scan analytics will still work as that's server-side.

Third-Party Cookies Blocked

If you block third-party cookies, you may experience issues with: Google OAuth login (alternative email login may be required), Stripe payment processing (may need to enable cookies temporarily), CDN performance optimizations.

Manage Your Cookie Preferences

You have full control over how we use cookies. Manage your preferences in your account settings or contact us with questions.

Contact Privacy Team

Menu