Privacy Policy

Draft 1 · 2026-11-06 · not yet in force

Qrzo (qrzo.app) is run by Alan Christopher Alamillo Medina, an individual in Mexico, who is responsible for the personal data described here. Contact: support@qrzo.app.

People who scan a code

When someone scans a Qrzo code, we count one scan for that code, with the time. We do not store the scanner's IP address, device, location or any cookie. Cloudflare, which runs our servers, sees the network address to deliver the request.

Account holders

• Email address, to sign you in with an emailed link and to send you notices about your codes. Sign-in emails are sent by Resend.
• Your codes: destinations, titles and the history of their changes, so we can redirect scans and keep your codes safe after a restore.
• Scan counts per code and day, for your analytics.
• Network address when you create codes, kept to apply rate limits against abuse.
• Custom domains you attach, and their status, so we can serve and monitor them.

We send destinations to Google's Web Risk service to check them for malware and phishing. We send nothing else about you.

Payments

Paddle.com, our merchant of record, collects your payment and billing details. We receive your subscription status and the email it belongs to. We never see your card number.

Abuse reports

If you report a code, we keep the report, your email if you give one, and your network address, to handle the report and limit spam.

Cookies and tracking

After you sign in we set one cookie to keep you signed in. This site has no analytics scripts, trackers or ads. The free generator runs in your browser and sends nothing to us. The QR checker also runs in your browser; only when you press Check redirects does it send that one link to us, so our server can follow its redirects. We do not store or log the link or the result. To limit abuse we count those checks per connection under a one-way code made from your IP address and a random value that is deleted the next day.

Your choices

You can export all your codes at any time from your account. To get a copy of your data, or to have your account deleted, contact us at the address above. Deleted codes stop redirecting (410) and their links are never reused.

Also see the Terms and the Redirect Promise.