Privacy and terms

When someone scans a code

qurl records each scan with a rough area and the type of phone, uses the IP address for a moment without keeping it, and saves nothing on the phone.

There are no cookies on scan pages and no profiles of the people who scan. Most scans never see a qurl page at all: they go straight to the destination.

What each scan keeps

• The time, to the minute, in London time.
• The code, the rule that applied and the destination.
• A rough area and country, and the type of phone and its system.
• Whether it was that phone’s first scan of the code that day, which is how “about N people” is counted.

It never keeps an IP address, the browser’s full details or anything that could be linked to one person across days.

How long it’s kept, and where

We keep each scan for 35 days, then only totals: by the hour for 13 months, then by the day. A closed workspace is deleted within 30 days, and from backups within a further 35 days.

Scan records are stored in Finland, in the EU, and their encrypted backups in Belgium, also in the EU. Scans pass through Cloudflare’s network, close to whoever scans, under UK-approved safeguards.

If you’d rather your scans weren’t counted, ask qurl not to count them. Scans from a browser that sends Global Privacy Control aren’t counted either.

If you have an account

We keep your name, work email, organisation and billing details to run your account, and nothing else about you. You can close your workspace at any time.

To ask what we hold about you, or to have it deleted, email privacy@qurl.co.

Terms

Every plan is billed monthly and you can cancel in any month. If you stop paying, every printed code keeps sending people to its current destination. The full terms of service will be published here before qurl launches.