Privacy Policy

1. Data Controller

qr9 — a service by:
Sichtwerk AG
Gaiserstrasse 16
9050 Appenzell, Switzerland
Email: privacy@qr9.ch

2. Data Collected

We collect and process the following data:

• Account data: Name, email address, hashed password
• Payment data: Processed directly by Stripe (stripe.com). We do not store credit card details.
• QR code data: Destination URLs, design settings, uploaded logos
• Scan data: IP address (anonymised), user agent, timestamp, referrer for dynamic QR codes
• Technical data: Server logs (IP address, timestamp, pages visited)

3. Purpose of Processing

• Provision and operation of the Service
• Management of your user account
• Billing via Stripe
• Scan statistics for your QR codes
• Technical security and abuse prevention

4. Legal Basis

Processing is carried out on the basis of the Swiss Data Protection Act (nDSG) and the GDPR, where applicable. The legal basis is the performance of the contract (provision of the Service) as well as our legitimate interest in the technical security and improvement of the Service.

5. Hosting & Data Location

All data is hosted on servers in Switzerland. No data is transferred to third countries, with the exception of payment processing via Stripe (USA, with adequate safeguards).

6. Third-Party Services

• Stripe: Payment processing (stripe.com/privacy)
• Bunny Fonts: Web fonts, GDPR compliant, no tracking

7. Data Retention

Account data along with associated QR codes, scan data and logos are stored until your account is deleted. Upon account deletion, all data is immediately and permanently removed.

8. Your Rights

You have the right at any time to:

• Access your stored data
• Rectification of inaccurate data
• Deletion of your data
• Data portability (export of your data)
• Object to processing

Contact us at privacy@qr9.ch or delete your account directly in your profile settings.

9. Cookies

We only use technically necessary cookies (session cookie for authentication). No tracking or marketing cookies are used.