Privacy Policy

Last updated: 2 September 2026

WifiQRly ("we", "us") is a QR code service operated from the United Kingdom. This policy explains what information we handle, why, and what your rights are. We have tried to write it the way we would want to read it: plainly.

The short version

• We store your email address and the QR codes you create.
• When someone scans one of your codes, we record the time, the device type (phone, tablet or computer) and the approximate city it came from. We never store IP addresses, GPS positions, or anything identifying the person who scanned.
• We don't sell data, we don't run advertising, and we don't use tracking cookies.

What we collect, and why

Account information. When you create an account we collect your email address and a password (stored only in securely hashed form by our authentication provider). We use these to sign you in and to send you essential account emails such as confirmation and password-reset messages.

Your QR codes. We store the codes you create: their destinations, names, captions and design choices. That's the product — it's how your codes keep working and stay editable.

Scan analytics. When a dynamic code is scanned, our server records the moment it happened, a device category (mobile, tablet or desktop, inferred from the browser), and an approximate location — city, region and country — derived from the network the scan came from. This is coarse, aggregate information similar to what any website can see about its visitors. We deliberately do not store IP addresses, do not collect precise GPS coordinates, and cannot identify who scanned a code.

Payments. When paid plans launch, payments will be processed by Stripe. Card details go directly to Stripe and never touch our servers; we receive only confirmation of what was purchased.

Cookies

The app uses only the storage necessary to keep you signed in. There are no advertising or cross-site tracking cookies anywhere on wifiqrly.com.

Where your data lives

Codes and scan statistics are stored with Cloudflare, whose network serves your codes worldwide. Account data is stored with Supabase in their London (UK) region. Transactional emails (confirmation, password reset) are delivered by Resend.

Who we share data with

Only the service providers that make WifiQRly run: Cloudflare (hosting and delivery), Supabase (accounts), Resend (email), and, once payments launch, Stripe. Each processes data on our instructions. We do not sell or rent personal data to anyone, and we don't share it with advertisers.

How long we keep it

Your codes and their statistics are kept for as long as your account exists, because deleting them would break your printed codes. If you delete a code, its scan records are deleted with it. If you ask us to close your account, we delete your account data and codes within 30 days.

Your rights

Under UK data protection law you can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, or object to how it's used. Email [email protected] and we'll respond within a month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk), though we'd appreciate the chance to sort things out first.

If you scanned someone's QR code and are wondering what we know about you: effectively nothing. A scan record contains no identity, no IP address and no precise location, so we could not single out your scan even if asked.

Changes to this policy

If we change this policy in a meaningful way, we'll note the new date at the top and, for significant changes, email account holders.

Contact

WifiQRly is operated by David Maxwell. Questions about this policy: [email protected].