Privacy Policy

When you create an account we collect your email address and display name. You can sign in with Google (we receive the name and email associated with your Google account — not your password) or with email and a one-time verification code.

If you use QRni's paid features, billing details are processed by our payment provider (Polar). We store your subscription status and plan tier, not your full payment card number.

When you create links, handles, or QR templates, we store the content you submit — including destination URLs, custom slugs, titles, and QR styling settings. If you upload images (such as QR logos, handle avatars, cover photos, or link thumbnails), those files are stored in our backend storage.

If you publish a handle landing page, we store the profile and theme settings you choose (display name, bio, social links, and styling). Only links you explicitly mark as public appear on that page.

When a visitor clicks one of your short links we log the timestamp, the link slug, the click source where available (QR scan, direct link, or click from a handle page), referrer, browser user agent, and country-level geolocation derived from CDN edge headers. We do not store raw IP addresses in click records.

When someone views a public handle landing page, we log a page view with similar metadata (timestamp, referrer, user agent, and country). Page views are rate-limited using a hashed IP key for abuse prevention; the raw IP address is not stored in page-view records.

If you contact us through the contact form, we collect your name, email address, message, and IP address (used for rate limiting and abuse prevention).

When you submit a destination URL, we may send that URL to Google Safe Browsing to check for known threats. We do not send your account details with that request.

We use the information we collect to:

• Operate and maintain the QRni service
• Provide click and page-view analytics for your links and handles
• Render public handle landing pages and QR codes from your settings
• Process subscriptions and manage your plan tier
• Send transactional emails (e.g. email verification codes)
• Check submitted URLs for known security threats
• Detect and prevent abuse of the platform

We do not sell your personal information to third parties. We do not use your data for advertising.

QRni uses a single session cookie to keep you signed in. No third-party advertising or tracking cookies are set. We use a strictly-necessary functional cookie only.

We use the following third-party providers to operate the service:

• Convex — real-time database, file storage, and serverless backend. Your account data, links, analytics, and uploaded files are stored in Convex's infrastructure.
• Resend — transactional email delivery for account verification codes.
• Polar — subscription billing and payment processing for QRni Pro. Subject to Polar's Privacy Policy.
• Google OAuth — optional sign-in provider. Subject to Google's Privacy Policy.
• Google Safe Browsing — URL threat checks when you create or edit links. Subject to Google's Privacy Policy.

Your account data is retained for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us.

Analytics visibility depends on your plan: Free accounts can view up to 7 days of click and page-view data; Pro accounts can view up to 90 days. Underlying click records may be retained longer for service operation but are not shown in the dashboard beyond your plan limit.

Deleted links and handles are moved to trash and can be restored for up to 3 days before permanent removal.

We use industry-standard measures to protect your data, including encrypted connections (HTTPS) and access controls. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

You can access and update most of your information directly from your account settings. You may also request a copy of your data, ask us to correct it, or request deletion of your account by contacting us. Depending on where you live, you may have additional rights under your local data protection laws, including under the Philippine Data Privacy Act of 2012.

QRni is operated from the Philippines, and the third-party providers we use to run the Service (such as Convex, Polar, Resend, and Google) may store and process your data on infrastructure located in other countries, including the United States. By using the Service you understand that your information may be transferred to and processed in countries other than your own.

This Privacy Policy is governed by the laws of the Republic of the Philippines, including the Data Privacy Act of 2012, without limiting any non-waivable rights you may have under the data protection laws of your own country.

If you have questions about this policy or your data, please contact us.