Privacy Policy

Effective date: May 2026

Scan Worthy ("we," "our," "us") is operated by Absolutely Massive LLC. This policy explains what data we collect, how we use it, and your rights.

What we collect

Free static QR code users

We collect nothing. No account, no email, no personal information. Free QR codes are generated in your browser and downloaded directly to your device. We have no way to identify you and no record that you visited.

We do record anonymous page view data (page path, country derived from IP, and a random visitor ID stored in your browser's local storage). This data cannot identify you personally. We use it to understand how many people visit the site and which pages are popular.

When you download a free QR code, we record the file format (PNG/SVG/PDF), the destination URL you entered, and your country. This helps us understand how the tool is being used. We do not record your IP address or any identifying information with this data.

Smart QR subscribers

When you create a Smart QR account, we collect:

  • Email address — used for login, billing notifications, and support communication
  • Password — stored as a bcrypt hash; we never see or store your plain-text password
  • Payment information — processed and stored by Stripe; we never see or store your credit card number
  • QR code data — your destination URLs, QR code names, and configuration settings
  • Scan data — when someone scans your Smart QR, we log the device type, country (derived from IP), and timestamp. We hash IP addresses with SHA-256 before storage; we never store raw IP addresses

How we use your data

  • To provide the service (redirect your Smart QR codes, show scan analytics)
  • To send transactional emails (welcome, cancellation, payment issues, support replies)
  • To respond to support requests
  • To understand site usage and improve the product (anonymous analytics only)

What we do NOT do

  • We do not sell your data to anyone
  • We do not share your data with advertisers
  • We do not run ads on our site
  • We do not use tracking pixels or third-party analytics that follow you around the web
  • We do not share scan data or destination URLs with third parties
  • We do not use your data for AI training or model development

Third-party services

We use the following third-party services to operate Scan Worthy:

  • Stripe — payment processing. Stripe's privacy policy governs how they handle your payment information.
  • Supabase — database hosting. Data is stored in Supabase with row-level security.
  • Resend — transactional email delivery.
  • Vercel — website hosting.

We do not share your personal data with any services beyond those listed above. Each service receives only the minimum data necessary for its function.

Cookies and local storage

We use one httpOnly session cookie for logged-in users (authentication only). We store a random visitor ID in your browser's local storage for anonymous page view counting. We do not use advertising cookies, tracking cookies, or third-party cookies of any kind.

Data retention

  • Free users — anonymous page view data is retained indefinitely but cannot be linked to any individual
  • Smart QR subscribers — account data is retained while your account is active. QR redirect mappings are retained permanently (this is the forever-redirect promise)
  • Deleted accounts — personal data is anonymized upon account deletion. QR redirect mappings are retained to honor the forever-redirect promise but are no longer associated with your identity

Your rights

You can:

  • Export your data — download all your QR codes, destinations, and scan history as JSON from your dashboard (Account & Billing)
  • Delete your account — removes your personal data and anonymizes your account (Account & Billing → Delete account)
  • Update your email or password — from your dashboard
  • Contact us — through the support form in your dashboard

Children

Scan Worthy is not directed at children under 13. We do not knowingly collect personal information from children under 13.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated to registered users via email at least 30 days before taking effect.

Contact

For privacy-related questions, contact us through the support form or email support@scanworthy.com.

Scan Worthy is operated by Absolutely Massive LLC, Atlanta, GA, USA.