Privacy
What this marketing site collects about you, which at the time of writing is nothing at all.
This site
These pages set no cookies, run no analytics and load nothing from a third party. That is not a policy position so much as a description: the Content-Security-Policy on this site forbids third-party scripts, so a tracking tag could not load even if one were added by accident.
The web server records ordinary request logs — the sort every web server keeps — and we do not join them to anything or use them to build a profile of you.
The product
The application is a separate system with its own privacy notice, which is the one that matters if you have an account. One thing worth stating here because it is unusual: when somebody scans one of your codes, their IP address is never stored. It is salted, hashed and truncated, and the salt rotates daily — there is no column that could hold the original.
Status
This page is a stub. It is linked rather than hidden because a legal link that goes nowhere is worse than one that admits it is unfinished, and it says only what is true today rather than borrowing boilerplate that would commit us to things nobody has read.
The application at app.qrthatlasts.com carries its own terms and privacy notice, which govern the product itself.