What we collect, and what we don't.

Who we are

KeptQR is operated by Data Boy Design, LLC, a Georgia (USA) company. For anything in this policy, contact [email protected].

The free generator collects nothing

Codes made with the on-site generator are created entirely in your browser. The content you encode — URLs, Wi-Fi passwords, contact details, text — is never sent to our servers. We could not read it if we wanted to, and we have designed things so we don't want to.

What we collect from visitors

We run self-hosted, cookieless, anonymous site analytics (Umami): pages viewed, referrer, and browser/device class. No advertising trackers, no fingerprinting for ad purposes, and no data sold or shared with data brokers — ever.

What we collect when you sign up

The beta form asks for your email and whatever you choose to tell us about your use case. We use it to contact you about KeptQR and nothing else. Marketing email requires your explicit opt-in, and you can unsubscribe anytime.

What we collect when codes are scanned

When someone scans a dynamic code we process the request data needed to redirect them. For codes with active analytics we store: time, country/city and region (estimated from IP), approximate city-level coordinates (radius-bounded, never a precise location), device OS/type, and an anonymized identifier (a salted, rotating hash of IP + browser signature) used only to count unique scans. We do not store raw IP addresses of scanners.We momentarily evaluate each scan IP's network origin (datacenter vs human-browsing) to filter automated and security-scanner traffic from scan counts; the raw IP is never stored.

For all codes — including canceled accounts' — we keep aggregate scan counts for abuse prevention and service operation; counts contain no personal data.

When you use the API

When you use the KeptQR API, we log each request's time, route, result and timing, and which of your keys made it. We don't keep what you sent or what we returned, with two exceptions: a request id your software chooses to send us, and, when you send an Idempotency-Key, the response itself for 24 hours, so a retry gets the same answer (for a bulk request made with a test key, that is the whole response, up to 512 KB). We keep request logs for 30 days, then delete them; daily totals are kept for usage and billing for as long as the workspace exists. If your workspace is deleted, all of it goes with it.

If you connect an app such as Claude or ChatGPT, we record which app, who connected it, to which workspace and with what access, and keep that with the workspace's API key history. We store only fingerprints of its sign-in tokens, never the tokens. Its requests are logged like any API request.

Your data rights

Ask and we'll show you what we hold about you, correct it, or delete it. Account deletion removes your data within 30 days; aggregate, non-personal counters may be retained. Deleted data can remain in our encrypted backups for up to 30 days after that, and is then gone from those too.

Processors we use

• Supabase — database and file storage hosting
• Resend — transactional email
• Stripe — payments
• Cloudflare — network, DNS and encrypted backup storage

Each receives only what its function requires.

Changes

Changes to this policy are posted here with the date above. If a change meaningfully reduces your privacy, we'll say so plainly rather than hoping you don't notice. See also: the Code Lifetime Promise.