Privacy & Security Compliance

Privacy Policy

Last Updated & Effective Date: September 2, 2026 • Applies to CuteQRCode & seQR.li (cuteqrcode.com and seqr.li)

1 Identity of the Application & Entity

This Privacy Policy applies to the software, website, and services provided under the unified brand name CuteQRCode & seQR.li, accessible at https://cuteqrcode.com and https://seqr.li (collectively, "we", "us", or "the Service").

CuteQRCode & seQR.li is a design-first online QR code studio that allows creators, businesses, and developers to generate custom-styled QR codes, embed brand logos, create shortened redirect links, and manage dynamic destination URLs without forced sign-ups.

2 Information We Collect & Why We Collect It

We only collect information strictly required to provide, secure, and maintain the functionality of our QR generator and dynamic short link platform:

Data Category	Specific Data Collected	Primary Purpose
Google Account Data (Optional)	Google Name, Email Address, Profile Picture URL, Unique Google User ID (UID).	Authenticating your account session and syncing your saved QR codes across devices.
User Content & Payloads	Target URLs, Wi-Fi credentials, contact vCard info, plain text entered into the generator.	Encoding into the visual QR matrix and routing dynamic short redirects.
Brand Logos & Artwork	Image files (PNG, JPG, SVG) uploaded for embedding as center emblems or background mosaics.	Rendering your customized QR code graphics locally in your browser.
Aggregated Scan Metrics	Total scan counts, timestamps, coarse country/region, and device operating system.	Displaying aggregate performance analytics to dynamic link owners. No personal scanner IP or identity is stored.
Billing & Payments	Payment status, subscription tier, Stripe customer identifier.	Managing premium subscriptions (CuteQR Pro & All-Access) handled entirely via Stripe PCI-DSS Level 1.

3 How We Use Your Information

We use collected data solely for the following legitimate business operations:

• Account Authentication & Sync: Enabling you to sign in with 1 click using Google and view your generated QR codes across any desktop or mobile device.
• Dynamic Redirect Execution: Routing scans of dynamic QR codes from seqr.li/[slug] to your updated target destination with high-speed DNS and sub-millisecond edge response times.
• Abuse Prevention & Security: Scanning dynamic destination URLs against automated safety lists to block phishing, malware, scam redirects, and fraudulent activities.
• Subscription Management: Enabling feature entitlements for CuteQR Pro subscribers (such as SVG vector exports, custom short slugs, and attribution removal).

4 Data Storage, Encryption & Security Architecture

We protect all user data using enterprise-grade administrative, physical, and technical security safeguards:

• Encryption in Transit: All web traffic and API calls between your browser and our servers are encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS).
• Encryption at Rest: Cloud databases and authentication tokens are hosted on Google Cloud Firestore with AES-256 encryption at rest.
• Client-Side Processing: Static QR code rendering, color calculations, shape algorithms, and image pixel analysis occur entirely on your local device within the client-side JavaScript engine.
• Zero-Friction Anonymous Mode: Users who do not sign in have their design history stored exclusively in their own browser's localStorage. No account registration is required to create, customize, or export high-resolution QR codes.

5 Third-Party Service Providers

We share data only with essential cloud infrastructure providers under strict confidentiality agreements:

• Google Cloud Platform & Firebase: Provides user authentication, encrypted database storage, and hosting infrastructure. (Privacy: Google Privacy Policy).
• Stripe, Inc.: Processes subscription payments securely without exposing raw credit card numbers to CuteQRCode. (Privacy: Stripe Privacy Policy).
• Cloudflare, Inc.: Provides edge CDN routing, SSL management, DDoS mitigation, and dynamic short redirect caching. (Privacy: Cloudflare Privacy Policy).

6 Data Retention Policy

• Active Accounts: User profile data and saved QR codes are retained as long as your account remains active so you can access and manage your codes.
• Dynamic Redirect Records: Dynamic QR links remain active according to your subscription tier or until explicitly deleted.
• Guest History: Stored strictly on your local device and cleared automatically when you clear your browser cookies and storage.

7 User Rights & Data Deletion Procedures

You have full ownership and control over your personal data at all times:

• 1-Click Deletion: You can delete individual QR codes or purge your entire generation history directly in the app at any time via the History tab. Deleting a dynamic code immediately deactivates its redirect route.
• Complete Account Erasure: You may request complete erasure of your Google user profile and all associated data from our systems by emailing support@cuteqrcode.com. Account deletion requests are completed within 48 hours.
• Revoking Google Permissions: You can disconnect CuteQRCode from your Google account at any time via your Google Security Permissions Dashboard.

8 Children's Privacy

Our service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13.

9 Updates to This Policy

We may periodically update this Privacy Policy to reflect enhancements to our features or regulatory requirements. Any modifications will be published directly on this page with an updated "Last Updated & Effective Date".