Privacy Notice
Generate QR Itself respects your privacy while providing the QR generator, API, and subscription services. We process only the data needed to deliver the platform and keep it secure.
Accounts & authentication
Authentication is provided by Clerk so we can identify your account and protect the dashboard. We receive identifiers such as user ID, email address, and basic profile details that you choose to share.
Billing & subscriptions
Subscriptions and payments are processed by Stripe. We store customer and subscription identifiers, plan details, status, and billing dates while payment data is handled by Stripe.
API usage logs
API usage is logged with request method, path, status, duration, user agent, request ID, and the API key ID. API keys are stored only as a SHA-256 hash with a server-side pepper, never in plain text. Request payloads are stored encrypted at rest with AES-256-GCM and an associated hash for integrity checks.
Analytics
We use a self-hosted instance of Umami to measure aggregated visits. The tracker runs without cookies or personal identifiers and honours the Do Not Track browser setting.
Security & monitoring
To prevent abuse we enforce rate limiting using account and API key identifiers, with short-lived counters in memory or Redis. Operational monitoring is handled via Sentry, which may collect technical metadata (e.g. IP address, user agent, error context). Edge security services may process network information to protect the platform.
Cookies and similar storage
We use only technical cookies and local storage needed for authentication, security, and API documentation. No profiling or advertising cookies are used. See the Cookie Policy for details.
Data retention
Aggregated analytics records are kept for 12 months and automatically deleted afterwards. API request logs are retained for up to 24 months for security and billing audits. Account and subscription records are retained while the account is active and as required by law.
Your rights
You may request access, rectification, erasure, restriction, or object to processing by contacting us at [email protected].
Contact
For privacy enquiries, email [email protected].
Owner details
Generate QR Itself is provided by Salvatore Criniti (KrystalCode), VAT IT04018610792. For legal notices contact [email protected].