Privacy Policy

QRbuild is a freemium QR code generator and tracking platform. We believe in transparency and keeping things simple. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

QR Code Generation Data

When you generate a QR code, we record metadata about the request — the content type (URL, text, Wi-Fi, etc.), style preferences, and output format. This data is submitted to Basin forms so we can understand conversion patterns and improve the product.

Static QR codes are generated entirely in your browser. The content you encode (your URL, text, or Wi-Fi credentials) is never sent to our servers during generation.

Marketing Attribution Data

We capture UTM parameters and traffic source data (utm_source, utm_medium, utm_campaign, utm_term, utm_content) to understand how visitors find QRbuild. We also track page journey, engagement time, and session count using client-side JavaScript.

We do not set any cookies for this tracking.All attribution data is stored in your browser's sessionStorage and localStorage only. You can clear this data at any time through your browser settings.

Email Address

We collect your email address only when you voluntarily opt in — for example, to receive scan tracking notifications or to subscribe to our newsletter.

What We Don't Collect

• We do not use Google Analytics or similar third-party analytics platforms.
• We do not set cookies for tracking purposes.
• We do not sell or share your personal data with advertisers.

2. How We Use Your Data

• Product improvement: QR code generation metadata helps us understand which features are most useful and where to invest next.
• Marketing performance: Attribution and engagement data helps us measure which channels bring in the right audience.
• Communication: If you opt in, we use your email to send scan notifications, product updates, or marketing emails.

3. QR Code Privacy

Static QR Codes

Static QR codes are generated entirely client-side in your browser using JavaScript. The content you encode never leaves your device. We have no access to the data inside your static QR codes.

Tracked QR Codes (Coming Soon)

When we launch tracked QR codes, scans will route through our redirect servers so we can count scan events and provide analytics. We will update this policy with full details before that feature goes live.

4. Third-Party Services

We rely on a small number of trusted services to run QRbuild:

• Vercel — Hosting and edge delivery.
• Basin — Form submissions and conversion data collection.
• Resend — Transactional and marketing email delivery.
• Airtable — Content management (blog posts, use cases).

Each of these services has their own privacy policy. We encourage you to review them if you have questions about how they handle data.

5. Data Storage and Security

Form submissions are stored securely through Basin. Email addresses are stored by Resend for delivery purposes. Client-side attribution data lives only in your browser and is never transmitted to a database.

We use HTTPS across the entire site and follow security best practices for all third-party integrations.

6. Your Rights

You have the right to:

• Request data deletion. Contact us and we will delete any personal data we hold about you.
• Opt out of marketing emails. Every marketing email includes an unsubscribe link. You can also contact us directly.
• Clear local tracking data.Since attribution data is stored in your browser's sessionStorage and localStorage, you can clear it at any time through your browser settings.

7. Children's Privacy

QRbuild is not directed at children under 13. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will revise the effective date at the top of this page. For significant changes, we will make reasonable efforts to notify affected users.

9. Contact

Questions about this policy or your data? Reach out anytime.

Email: qrbuild@catchdigital.io