Privacy

The substantive fact on this page is what we keep about people who scan your codes — they never agreed to anything, and most privacy policies are silent about them.

What using the site itself records

Pageviews, plus four moments — a code was designed, a sign-in was started, a sign-in finished, a code was downloaded — each tagged with the kind of code and nothing you typed into it. A static code is built entirely in your browser, so the contents never reach us: not the network password, not the phone number, not the contact card. A random identifier lives in your browser’s storage so one visit is not counted as four, and it is joined to an account only if you sign in.

Scanners are not tracked

A scan records the time, the browser string, the referring page and a rough country if the network supplied one. The scanner’s IP address becomes a keyed digest whose salt changes every day, which is enough to estimate how many different people scanned a code today and not enough — for us or anyone else — to follow one device across days.

Questions

What do you record when someone scans my code?

The time, a rough country if the network provides one, the browser type and the referring page. We do NOT store the scanner’s IP address: it is turned into a keyed digest that changes every day, so we can estimate how many different people scanned a code today and cannot build a movement history for anybody — including ourselves.