Privacy & Cookie Policy

1. Who we are

getQR (the "Service") is operated by Simsoft Computers SRL (sole registration code/CUI 15230504), Romania, the data controller. Contact for any privacy matter: office@getqr.ro.

2. What data we collect

• Account data: if you register, your name, email address and a securely hashed password. We send a one-time code by email to verify your address.
• Codes you save: if you are logged in, the content of the QR codes you choose to save.
• Public generators: the SEPA, WiFi, vCard and menu generators run in your browser — that data is not stored on our servers.
• Dynamic QR scan analytics: when someone scans your dynamic code, we record technical, non-identifying data: device type, country (derived from the IP address using a local database; the IP itself is not stored), referrer and timestamp.
• Payments: Pro subscriptions are processed by Stripe; we do not store card details.
• Usage analytics: Google Analytics 4 (see cookies below), only after you accept.

3. Cookies

We use:

• Essential cookies — session and security (CSRF) cookies, needed for login and forms. These do not require consent.
• Analytics cookies — Google Analytics 4 (_ga and related). These are set only after you click "Accept" on the cookie banner. We use Google Consent Mode v2 (analytics default "denied") and IP anonymisation. Your choice is stored locally in your browser (ga_consent).

You can change your mind anytime by clearing your browser storage, which brings back the cookie banner.

4. Why we use your data (legal basis)

• Contract: to provide your account and Pro features.
• Consent: for analytics cookies.
• Legitimate interest: security, fraud prevention and basic, aggregated statistics.
• Legal obligation: invoicing and accounting where required.

5. Who we share data with

We do not sell your data. We share it only with processors that help us run the Service: Stripe (payments), Brevo (transactional email) and Google (Analytics, only after consent).

6. How long we keep it

Account data is kept while your account exists. Scan analytics are kept to provide you with statistics. You can ask us to delete your account and associated data at any time.

7. Your rights (GDPR)

You have the right to access, rectify, erase, restrict or port your data, to object to processing and to withdraw consent at any time. To exercise these, email office@getqr.ro. You may also lodge a complaint with the Romanian Data Protection Authority (ANSPDCP, dataprotection.ro).

8. Mobile app (GetQR for Android)

The GetQR Android app offers the same scanning and QR generation features, plus access to your getqr.ro account. It is built to collect as little data as possible:

• Camera: the camera permission is used only to scan QR codes in real time, on your device. Camera images are processed locally and are never stored or sent to our servers.
• Account login: if you log in, your email and password are sent securely (HTTPS) to getqr.ro solely to authenticate you. The app then keeps an access token in the device's secure storage so you stay logged in; it does not store your password.
• Your codes: once logged in, the app shows and lets you manage the QR codes saved in your account.
• Scan history: the history of codes you scan or generate in the app is kept only on your device and is not uploaded to us. You can clear it anytime from the app.
• No ads, no tracking SDKs: the app contains no advertising and no third-party advertising or analytics trackers.

Deleting your account. You can permanently delete your account and all associated data yourself, at any time: log in on getqr.ro, open My account (getqr.ro/user/account) and use the “Delete account” section. Deletion is immediate and permanent and removes all your data — static and dynamic QR codes, file QR codes and uploaded files, scan statistics and mobile app access. Alternatively, you can email office@getqr.ro and we will delete it for you.

9. Changes

We may update this policy. The "last updated" date above reflects the latest version.