Privacy Policy

Last updated: September 6, 2026

RubyQR is operated by Phuc Nguyen (“we”, “us”). This policy explains what data we collect when you use RubyQR, why, and what control you have over it. It applies to the website, dashboard, and public API.

What we collect

  • Account data: your email address and, if you sign in with Google or GitHub, the basic profile info those providers share with us.
  • Content you create: the QR codes you generate — their destination content (a URL, contact card, WiFi credentials, etc.), any logo image you upload for customization, and the names/folders you give them.
  • Scan analytics:for dynamic QR codes, each scan records an approximate location (derived from IP address, not GPS), device and browser type, referrer, and timestamp. We don't know who scanned a code, only what and when.
  • API keys: if you use the public API, we store the key and log which endpoints it calls, for rate limiting and abuse prevention.
  • Session cookies: a cookie that keeps you signed in.
  • Advertising: our public pages (not your dashboard) show ads served by Google AdSense. Google and its partners use cookies to serve ads based on your visits to this and other websites. You can opt out of personalized ads at Google Ads Settings, and learn more at How Google uses information from sites that use its services.

How we use it

To run the service you signed up for: generate and serve your QR codes, show you scan analytics, enforce your plan's limits, and detect abuse (for example, QR codes that point to phishing or malware, which we scan for automatically). We do not sell your data, and we do not use it for advertising.

Where it's stored

Your data lives in our own database and file storage — we don't use a third-party cloud storage provider. If you sign in with Google or GitHub, that exchange happens directly with them under their own privacy policy.

Your rights

You can access, correct, or delete your account and its data at any time from the dashboard, or by emailing hello@rubyqr.com. Deleting your account removes your QR codes and analytics; we don't keep a backup copy beyond what's needed for a short time to prevent abuse of the platform.

Children

RubyQR isn't directed at children under 13, and we don't knowingly collect their data.

Changes to this policy

If we make a material change, we'll update the date at the top of this page and, where required, let you know directly.

Contact

Questions about this policy: hello@rubyqr.com.