Privacy

What we store — page creators

• Your account: email address and sign-in method (magic link, password, or Google).
• Your page: the name, age, intro, prompts, photos, and voice intro you add — that's the point of the product.
• Reveal-later details (Instagram, phone, other): stored, but shown to no one until you tap to share them inside a chat.
• Your codes and chats: the notes and mini-games on each code, messages, and any photos, voice notes, or clips sent in chat.
• Purchases: handled by Stripe. We never see or store your card number — only what you bought and that it was paid.
• Product events: things like “code opened” or “message sent”, so your dashboard can show you what happened and we can fix what breaks.

What we store — the person who scans

• No account, ever. No email, no phone number, no identity.
• A random key in a cookie on the phone that opened the code — that's what makes the page “theirs”. It identifies the phone that scanned, not the person.
• The chat name they choose (any name, or “Anonymous”) and the messages and media they decide to send.
• We don't show the sender anything about them beyond that the code was opened and what they themselves send.

What we never do

• No selling or renting data. No ad trackers, no third-party analytics pixels.
• No reading your chats for marketing. Humans look at content only when a page is reported or the law requires it.
• No precise location collection — we never ask for GPS.

Who processes data for us

Hosting and database: Supabase (data stored in Canada, ca-central-1). Payments: Stripe. Optional AI note helper: Anthropic — only the text you type into the helper is sent, used to write your note, and not used to train models. Notification emails: Resend. Each processes data only to run QRush.

Deleting your stuff

• Creators can delete photos, the voice intro, and unused codes anytime in the app. To delete the whole account and everything with it, email us — done within 30 days.
• Receivers hold no account; leave a chat and it's closed permanently. To have your side's messages wiped too, email us from any address with your chat link.

Cookies

Only the ones the product needs: your sign-in session (creators) and the code-holder key (receivers). No advertising or cross-site cookies of any kind.