Privacy Policy

Last updated July 10, 2026. The short version: we collect what the service needs to run, and nothing else.

Who's responsible

SolidQR, LLC, an Arkansas limited liability company, operates solidqr.co. Privacy questions and requests: support@solidqr.co.

What we collect, and why

When you buy a code: your email address and your purchase details, so we can give you access to your code and send receipts. Payment is processed by Stripe. Your card number goes to Stripe, never to us, and their handling of it is covered by Stripe's privacy policy.

When someone scans a code: we record the scan so the code's owner can see that it happened: timestamp, coarse location (country, region, city), device type, and the referring source. The scanner's IP address is used to derive that coarse location and an anonymized hash, and is not stored in raw form in scan analytics. Scan data belongs to the code's owner; we don't sell it or use it for advertising.

When you join a waitlist: the email and the address you wanted, so we can tell you if it becomes available. Nothing else, and no marketing list by stealth.

When you design a code: the designer runs in your browser. While you're checking address availability we use a temporary session identifier to hold your address for a few minutes; it expires on its own.

When you sign in to the dashboard: a sign-in cookie keeps you signed in on that device for 30 days. It identifies your session and nothing else; it doesn't track you, and signing out deletes it on the spot.

Server logs: like every website, our servers keep standard access logs (IP, request, time) for security and debugging, retained briefly and then discarded.

What we don't do

• No selling or renting personal data. To anyone. Ever.
• No advertising trackers, no cross-site tracking, no third-party analytics scripts on this site.
• No tracking cookies. The site works without asking you to accept anything.
• No reading your destination content; we scan destinations only for abuse (phishing, malware).

Who we share with

Only the vendors required to run the service: Stripe (payments), our infrastructure providers (hosting and content delivery), and an email delivery service for receipts and service notices. Each receives only what its job requires. We disclose data if the law genuinely compels us to, and we'll tell you when we're allowed to.

Retention and your rights

Purchase records are kept as long as your code is active (that's the product) plus what tax law requires. Waitlist entries are kept until the address is resolved or you ask out. You can ask us at any time to show you or correct the personal data we hold about you. Email support@solidqr.co and a human will handle it.

Deleting yourself

You can delete yourself completely. We won't make you hunt for it, and we won't guilt you out of it. Here is exactly how it works:

• Ask, then verify. Email support@solidqr.co from the address on your purchase, or use the delete option in your dashboard. We confirm the request through a verification link sent to that email, so nobody can delete you but you.
• Your codes stop working. This is the one thing you can do that ends your codes, and we want it in bold before you confirm: deletion permanently invalidates every dynamic code you own. Anything printed with them stops redirecting.
• Two weeks to change your mind. Your codes are switched off the moment you confirm, but we retain your information for 14 days in case you reconsider. Reply to the confirmation email within those 14 days and everything is restored exactly as it was. After 14 days, your personal data is permanently erased.
• Or right now. If you explicitly demand immediate erasure instead of the 14-day window, we honor that: personal data is permanently erased right away, and there is no restoring it.
• No refunds on self-deletion. Deleting yourself is not a return. One-time purchases are not refunded when you delete your account (the standard 30-day guarantee in our terms still applies on its own merits), and an active Pro subscription is canceled without proration.
• Your old address is retired, not resold. After deletion, your personalized address is permanently retired. We never resell it, so nothing you printed can ever be pointed somewhere else by a stranger.

Children

The service isn't directed at children under 13 and we don't knowingly collect their data.

Changes

If this policy changes, the new version is posted here with a new date. We won't quietly grant ourselves new uses of old data.

Related: Terms of service