Privacy Policy

Who we are

FreeQR (freeqr.com.au) is a QR code service operated in Australia. This policy explains what we collect, why, and the choices you have. We handle personal information in accordance with the Australian Privacy Principles.

What we collect

Account data: your email address, display name and sign-in provider, managed through Firebase Authentication. If you choose to sign in with Google, Microsoft or Facebook, that provider shares only your name, email address and an account identifier with us — never your contacts, posts, emails, calendar or files — and signing in this way doesn't sign you up to marketing emails. Product data: the dynamic QR codes you create — their names, destinations, designs, hosted page content and uploaded files. Billing data: payments are processed by Stripe; we never see or store your full card or bank details. Scan analytics: when someone scans a dynamic QR we record the country, region, device type, browser and operating system of the scan. We do not permanently store scanners' IP addresses — unique-visitor counts use a rotating, privacy-preserving hash that cannot be reversed to an IP. Acquisition data: when you create an account we record a small amount of first-visit information — the referring site's domain (e.g. google.com), campaign parameters if you followed a marketing link, and the page you landed on — so we can tell which channels bring genuine customers. We do not store full referrer URLs, browsing history, or any device fingerprinting data. Public form submissions: some FreeQR-powered pages (equipment fault reports, feedback and issue-reporting forms, visitor and site sign-in) let someone without a FreeQR account submit information by scanning a QR code — their message or form answers, an optional name or contact detail if they choose to provide one, and an optional photo. This information is visible only to the FreeQR account that created the form, never published publicly, and the person submitting it is never required to identify themselves unless the form owner has chosen to require it.

What we deliberately don't collect

Static QR codes (including Wi-Fi passwords and vCard contact details) are generated in your browser. Their contents are never transmitted to or stored on our servers.

How we use information

To operate the service (redirects, dashboards, analytics), process payments, prevent abuse (destinations are checked against Google Web Risk), and communicate service messages. We do not sell personal information.

Email communications

We send operational emails about your account — sign-up verification, password resets, billing receipts and plan changes, and service notices for features you use (for example, an equipment fault report or feedback submission, if you've enabled that notification). These are not optional and are not marketing.

We may also send occasional product tips, feature updates and offers, but only if you opt in — this is off by default. You can turn it on or off anytime in Settings → Email preferences, and every such email includes a one-click unsubscribe link that doesn't require logging in. Unsubscribing never affects the operational emails above. We don't enrol existing accounts into product emails automatically — opting in is always your choice.

Outbound email may be sent on our behalf by a third-party delivery provider (currently Resend). That provider sees the email content and recipient address needed to deliver the message; it does not have access to your FreeQR account or QR data otherwise.

Third parties we rely on

Google Firebase (authentication, database), Stripe (payments), Cloudflare (redirects, analytics, file storage), Google Web Risk (destination safety checks), an email delivery provider (see above) and, if enabled, Google Analytics for aggregate site statistics and Google Ads conversion measurement, which uses Google cookies and the ad-click identifier Google adds to ad links to tell us whether an ad led to a sign-up or purchase. The conversion details we send Google are limited to the conversion type, an approximate value and a one-way hashed order reference — never your QR content, email or payment details.

Retention & deletion

Analytics are retained according to your plan (30 days on Free). You can delete individual QR codes, files, or your whole account from Settings. After account deletion we retain only what we must: financial records required by law and QR short-link tombstones (so a deleted code's link can never be taken over by someone else).

Contact

Privacy questions or requests: support@freeqr.com.au. For how FreeQR is actually built to protect your account and data, see Security & Privacy Practices.