LoadingLoading page content
We use your data to run the service. We do not sell it.
Updated 3 November 2026. This notice covers our website, app and printed-code redirects. NUVIX STUDIO LIMITED is the data controller. Our company details are below. For privacy requests, email hello@qrthatlasts.com.
We receive information from you, your browser, people scanning or reporting codes, people inviting others to sign up, our hosting provider and payment providers. Account and billing details needed to supply a paid service are required for that service; advert measurement is optional.
The website and app ask separately. If you agree in the app, we may save the configured services’ browser identifiers against your account and send signup, checkout and first-subscription events from our server. Our measurement events do not include your name, plain-text email, password or QR destination. The matching choice above controls whether we send hashed identifiers. Providers may collect browser information through their own scripts.
Change the website choice on our cookies page and the app choice on the app privacy page. Signed-in account settings let you remove stored advert identifiers and stop queued measurement. Withdrawal does not make earlier processing unlawful or automatically erase information already sent to a provider.
Where we offer it, signed-in customers with a confirmed email address can tick a box on the help page to ask Jev which help article fits their question. Jev is an AI model run by TypeSafe AI, Inc. in the United States. Nothing goes to TypeSafe unless you tick the box and press Ask Jev, and we rely on your consent for that. Untick the box to stop; our own search still works.
Our server sends your question with our fixed list of help topics. We try to remove obvious identifiers first, such as email addresses, links, long numbers and postcodes, but we can miss names and other details, so leave out anything private. We add no account details. Jev picks a topic from our list and we show our own article. We do not store your question or Jev’s answer. We keep a count of your requests to enforce an hourly limit, on the basis of legitimate interests. The count is included in your data export and deleted when the account is closed. Routine cleanup also removes it once it has gone unused for two days, though not at an exact time.
TypeSafe processes the question for us under its data processing addendum, which covers transfers from the UK with the international data transfer addendum to the EU standard contractual clauses. Its customer agreement also lets it keep and use request data, without a time limit, to prevent fraud and abuse, to comply with the law, and to produce technical logs, statistics and classifications about how the service is used, which its terms let it use to improve its services. Its terms do not allow it to train AI models on your question without our consent, and set no fixed deletion period. See TypeSafe’s privacy policy. Withdrawing consent stops future requests; it does not remove what was already sent.
Account details stay while your account is open. Individual scan records are normally removed in monthly batches, once the whole month is over 90 days old and its daily totals are final. That usually means up to about 122 days. Removal can take longer if the daily totals or the cleanup are delayed. Records of unsuccessful password checks normally last about a day, our own rate-limit records two days, and application error records 30 days. Account-security rate-limit records are removed by routine cleanup once they have gone unused for two days, though not at an exact time. Sign-in sessions last up to 30 days and can renew while you use the app. Invitations normally expire after 14 days; we retain the invitation record and remove its email address when the associated account is erased.
Destination history, daily scan totals, billing, measurement-event and account-event records, consent records and abuse reports currently have no fixed automatic deletion period. They support historical statistics, safety investigations and billing disputes. Retained URLs and event details may contain personal data. Ask us about a particular record, including if you want it erased; a technical retention rule does not remove your legal rights.
The account owner can close the account in account settings. Closing it stops its dynamic codes and clears their names, designs and content. It also deletes the account’s saved designs, logos and folders, and removes the account name. If someone’s sign-in is used only on this account, we replace their name and email address and delete their password, sessions and two-step login. A sign-in still needed for another live account or for staff access is kept. Static codes you have already downloaded hold their content in the pattern, so they keep working and we cannot recall them.
Closure does not erase the retained records above, provider records or backups. Payment records include historical event data Paddle sent us, which can include names, billing addresses and limited card information. We replace the closed account’s email addresses where they appear in payment and account-history records, and otherwise keep those records. Cancel paid billing first: closing the account does not cancel a paid subscription for you. Closure is refused until the subscription has ended and the app has received confirmation, and while a checkout, payment or plan change is still being settled.
Neon hosts our database, Netlify hosts the service, Brevo sends service emails, Stripe sells paid plans as merchant of record; Paddle retains records of earlier purchases and Google Workspace hosts the inbox behind our contact address. Google Web Risk receives destination URLs for safety checks. Google, Meta and TikTok receive measurement data when you agree. TypeSafe receives help questions, with obvious identifiers we catch removed, if you choose to ask Jev. Account holders see scan statistics for their own codes. Our supplier list sets out what each supplier processes. We may also disclose information where legally required or needed to establish or defend a legal claim.
The database is configured in London. Some suppliers process data outside the UK, including TypeSafe in the United States. Contact us for details of the destinations and safeguards applicable to your data. Payment and measurement providers also explain their own processing in their privacy notices.
Depending on the circumstances, you can request access, correction, erasure, restriction or a portable copy, and object to processing based on legitimate interests. You can withdraw consent at any time. Email hello@qrthatlasts.com; we normally respond within one month and explain if a lawful extension or exception applies. Account owners can also download a copy of their account data from account settings. The download link works for an hour. After that the prepared copy can no longer be downloaded, and it is deleted by later cleanup, by a new export or when the account is closed.
You can complain directly to the Information Commissioner’s Office. You do not have to contact us first.
Automated safety checks can block a destination. Email us if you want a person to review a block. We will update this notice when our processing changes and tell account holders about material changes.
Who you are dealing with
The service is provided by NUVIX STUDIO LIMITED. Paid plans are sold through Stripe’s merchant of record service.