Privacy & cookies

Jonathan van den Heuvel (jvdhqr.tech). Requests or questions about your data: jonavdh99@gmail.com.

When you create an account we process your email address and a securely hashed password. We also keep activity records of the QR codes you create and scan (qr_events).

We process this data to provide the QR-code account service, authenticate you, and show your own usage. The legal basis is performance of the service contract (Art. 6(1)(b)) for the account, and legitimate interest (Art. 6(1)(f)) for basic usage and security logging (GDPR Article 6).

Account data and QR activity are stored in our own database. There is no third-party analytics or advertising; we use our own self-hosted, cookieless analytics (described below). Fonts are self-hosted; no visitor data is sent to font CDNs.

Account data is kept while your account is active; QR activity (qr_events) is kept no longer than needed for the service. You can request deletion of your account and data at any time.

You have the right to access, rectification, erasure, restriction, objection and data portability. Submit a request via jonavdh99@gmail.com. You may also lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

We use self-hosted, privacy-friendly analytics (Umami) on our own server. It is cookieless and collects only aggregate data: pages visited, the referring website, browser and device type, and approximate country (derived from your IP address, which is not stored). No data is shared with third parties, there is no cross-site tracking, and no profiles are built. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in understanding how the site is used. You can object to this processing.

We use only strictly necessary authentication cookies to keep you signed in. No tracking cookies.