Privacy Policy
Last updated 2026-09-05
Plain English: We collect the minimum data needed to operate the service. We do not sell your data or use it for advertising.
What we collect
Free tier (no account): We collect no personal information. QR code generation is entirely client-side. The URL you enter never leaves your browser.
Signed-in users (paid tier): When you create an account, we collect your email address. We use it only to send your sign-in link and subscription-related emails.
Analytics: We collect anonymised product usage events (e.g. "QR code generated", "PNG downloaded") to understand how the service is used. Events are not tied to your identity unless you are signed in.
Cookies and storage
- Session cookies — used only when you are signed in to maintain your login state. They are HttpOnly and Secure.
- Analytics first-party cookies — used for anonymised session tracking. No cross-site tracking.
- sessionStorage — used to deduplicate certain analytics events within a single session. Cleared when you close the browser tab.
How we use your data
- To send magic-link sign-in emails
- To manage your subscription and process payments
- To understand product usage and improve the service
- To respond to support requests
We do not sell, rent, or share your personal data with third parties for marketing purposes.
Subprocessors
To run the service we rely on a small set of industry-standard providers covering: cloud database & storage, application hosting, payment processing, transactional email, and privacy-respecting product analytics. The current list is available on request — email qrsnap-support@botitout.com.
Data retention
Account data (email address and subscription status) is retained while your account is active and for 90 days after deletion.
Anonymised analytics data may be retained for up to 24 months for aggregate trend analysis.
Your rights
If you have an account, you may request access to, correction of, or deletion of your personal data at any time. Email us at qrsnap-support@botitout.com.
Deletion requests are processed within 30 days. Anonymous analytics events cannot be retroactively attributed to you once collected.
Changes to this policy
We will update this page when the policy changes and revise the "last updated" date. Material changes will be emailed to signed-in users.
Contact
Questions about this policy? Email qrsnap-support@botitout.com.