Skip to main content
EZQR

GDPR Compliance

Last updated: April 2026

Data Controller

EZQR acts as the data controller for personal data collected through our platform. For QR code scan analytics, we act as a data processor on behalf of our users.

Legal Basis for Processing

  • Contract performance: Processing your account data to provide our QR code services
  • Legitimate interest: Processing scan analytics to provide our users with insights about their QR code performance
  • Consent: Marketing communications (opt-in only)

Data We Collect

  • Account data: Email address, name (optional), profile image (optional)
  • QR code data: Content, customization settings, target URLs
  • Scan analytics: Anonymous device type, browser, OS, country, city (no personal identifiers)
  • Payment data: Processed by Polar — we never store credit card numbers

Your Rights Under GDPR

  • Right of access (Art. 15): Request a copy of all your data
  • Right to rectification (Art. 16): Correct inaccurate personal data
  • Right to erasure (Art. 17): Delete your account and all associated data
  • Right to data portability (Art. 20): Export your data in machine-readable format
  • Right to object (Art. 21): Object to processing based on legitimate interest

How to Exercise Your Rights

You can exercise most rights directly from your dashboard Settings page:

  • Export your data: Settings → Export Data
  • Delete your account: Settings → Danger Zone → Delete Account
  • Update your information: Settings → Profile

For other requests, email us at [email protected].

Data Retention

Account data is retained while your account is active. Analytics data is retained for the duration of your subscription. Upon account deletion, all personal data is permanently removed within 30 days. Static QR codes contain no server-side data and are not affected.

International Transfers

Our services are hosted on Vercel (US). Data transfers outside the EEA are covered by Standard Contractual Clauses. Payment processing is handled by Polar, which is GDPR-compliant.

Data Processing Agreement

A DPA is available for business customers. View our DPA template.