Privacy

• Your email, your name if you give one, your timezone, and your country, so the app works and emails reach you.
• Your codes: their design, name, placement, destination links, rules, schedules and link history.
• Your plan state from Dodo Payments: which plan, when it renews, and the invoices. We never see or store your card number.
• Private notes our support team adds to your account when you write to us.

When someone scans a dynamic code we record the time, the country and city from the network, the device type, operating system and browser, and which rule applied. We do not store the IP address, and we do not set a cookie or any identifier on the person scanning. Repeat scans from the same device within 10 seconds count once. Link previews from chat apps and crawlers are stored as bots and never counted.

We set the sign-in session cookie, so you stay signed in. On the public pages (the home page, the free generator, pricing, guides and comparisons) we also use Google Analytics to count visits and see which pages people read. It sets its own cookies. It is not loaded on the pages people reach by scanning a code, and we send it no names, emails or code contents.

The free generator counts downloads with a random identifier kept in your browser's local storage, which never leaves your device except as that anonymous number.

• Supabase hosts the database and sign-in.
• Vercel serves the site, runs the redirects, and hosts custom domains.
• Upstash caches code lookups so redirects answer fast.
• Dodo Payments takes payment as merchant of record and handles tax.
• Resend delivers our emails.
• Google Safe Browsing checks destination links. Only the link is sent, never who created it.
• Google, if you choose to sign in with Google. We receive your email and name.
• Google Analytics, on the public pages only, to count visits.

Each of them only gets what their job needs. None of them may use your data for anything else.

Sign-in and account emails, a welcome after your first dynamic code, reminders before a trial ends and before renewals, payment problems, what happens after you cancel, a warning before codes pause, link safety blocks, and scan limit notices. We do not send marketing newsletters.

As long as you have an account. Scan history is kept for the life of the code so your analytics have history. Deleting your account in Settings removes your profile, codes, scans, domains and notes straight away. Invoices stay with Dodo Payments for as long as tax law requires.

You can see and change your details in Settings, delete your account there, or email hello@hueqr.com for a copy of your data. We answer within 30 days. If you are in the EU or UK you also have the right to complain to your data protection authority.

If this policy changes in a way that matters, we email you before it applies.