Legal
Privacy policy
Last updated: November 15, 2026
The short version: static codes are made in your browser and never reach us. We collect the minimum needed to run accounts, dynamic codes and billing, and we do not sell data or run advertising trackers.
Who we are
EverQR (“we”, “us”) operates this website. For any privacy question or request, write to joyron0910@gmail.com.
Static QR codes
When you make a static code, the content you type (links, WiFi passwords, contact details, text) and any logo you add are processed only in your browser. They are not sent to our servers, stored or logged.
What we collect
- Account data. Your email address and a securely hashed password, when you create an account.
- Dynamic code data. The name, destination address and design (including a logo, if you add one) of the dynamic codes you save.
- Scan data. When someone scans a dynamic code, we record the time, the device type (iOS, Android, desktop or other) and the country. We do not store the scanner's IP address, and we do not build profiles of people who scan.
- Billing data. If you subscribe, PayPal processes the payment. We receive a subscription identifier, its status and billing dates. We never receive or store your card or bank details.
- Usage statistics. We count page views and a few product events (for example, “a code was downloaded”) to understand what works. These counts use a visitor identifier that is derived from the IP address and browser type, changes every day, and cannot be turned back into either. We do not use cookies or device storage for analytics. Our hosting provider's Vercel Web Analytics also counts page views in the same cookieless way, without identifying individual visitors.
- Referrals. If you create your account through a friend's invite link, we store which account invited you so that both of you can receive the bonus dynamic code. The person who invited you sees only how many people joined through their link, never your name or email address. This record is deleted when either account is deleted.
- Technical logs. Our hosting provider keeps short-lived request logs (including IP addresses) for security and debugging.
Cookies
We use only the cookies that are strictly necessary to keep you signed in. Your light or dark theme choice is saved in your browser's local storage. There are no advertising or third-party tracking cookies.
How we use data
- To provide the service: sign you in, redirect dynamic codes and show you scan statistics.
- To manage subscriptions and respond to support requests.
- To prevent abuse, such as codes that lead to phishing or malware.
- To improve the product, using aggregated statistics.
Where the GDPR applies, our legal bases are performance of a contract (running your account), legitimate interests (security and aggregated statistics) and legal obligations (accounting records).
Who we share data with
We do not sell personal data. We use these service providers to run EverQR:
- Supabase for the database and sign-in.
- Vercel for hosting and cookieless page-view statistics.
- PayPal for payments.
These providers may process data outside your country, under their own data protection terms.
How long we keep data
- Account and dynamic code data: until you delete the code or your account.
- Scan records: for as long as the code they belong to exists.
- Billing records: as long as tax and accounting law requires.
Your rights and choices
You can delete any dynamic code, and your whole account, at any time from the Billing page in your dashboard. Deleting your account removes your codes and their scan records and cancels an active subscription. You can also ask us for a copy of your data, or to correct or delete it, by writing to joyron0910@gmail.com. If you are in the EU or UK you may also complain to your data protection authority.
Children
EverQR is not directed at children under 16, and we do not knowingly collect their data.
Changes
If we change this policy in a meaningful way, we will update the date above and notify account holders by email.