How QRZY handles your scan

When you scan a QRZY QR code, you are redirected through our service. Here is exactly what happens to your data:

1. Your full IP address is never stored. Our own Worker shortens it before saving (IPv4 keeps only the first two parts, for example 1.2.0.0; IPv6 keeps only the first four groups, the /64 prefix). The shortened form is kept for at most 7 days for de-duplication.
2. No cookies. No fingerprinting. The redirect itself happens on our server and does not set any cookies. On the free plan, the countdown page you may see before the redirect runs a small script that enables the Continue button when the countdown ends.
3. What we do store, for up to 7 days: timestamp of the scan, the country and city your request came from (derived from your IP address), the device class (mobile / desktop / tablet), browser family, operating system, the shortened IP address described above, a hash of your browser's user-agent string, and the channel of the link, if it has one. We do not store your full IP address or your raw user-agent string.
4. After 7 days even those rows are deleted. What remains is bucket counts (country, city, device class, browser, operating system and hour, for example "France, mobile, Safari, 2pm: 14 scans"), which do not contain an identifier for you. We treat these counts as non-personal data under GDPR Art 4(1) and Recital 26.

Because we do not keep a per-scanner identifier, there is no "your row" to delete. If you still want to submit a transparency request or ask questions, use the form on our Privacy Policy page. We email you the transparency notice right away and are notified of your request at privacy@qrzy.co. Your email address is not stored in our database.

You may also file a complaint with your national data-protection authority. The full list is at edpb.europa.eu.