CandorQR Privacy Policy
Last updated: 19 October 2026
This policy explains how CandorQR (candorqr.com) handles data.
Summary
- Static QR codes are generated on your device. We never receive what you type into the generator, including Wi-Fi passwords and contact cards.
- For accounts we store your email address and a hashed password. That's it.
- For dynamic codes we count scans in aggregate by day, country and device type. We do not store IP addresses or set cookies on redirects.
Controller
HevraBest Group Ltd (company no. 517045183), Israel. Contact: support@candorqr.com.
Data we process
| Data | Purpose | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Email, hashed password, session cookie | Provide your account | Contract | Until account deletion |
| Dynamic code names and destination URLs | Operate redirects; abuse prevention | Contract; legitimate interest | Until deletion, or 12 months after the grace period |
| Aggregate scan counts (date, country, device type) | Analytics for code owners | Legitimate interest | While the code exists |
| Subscription status and Paddle customer/subscription IDs | Billing | Contract; legal obligation | As required by law |
| Abuse reports (optional reporter email) | Safety and abuse handling | Legitimate interest | Up to 24 months |
| Support tickets (email, subject, messages) | Answering your questions | Contract; legitimate interest | Up to 24 months, or until account deletion |
| Cancellation survey answers (optional) | Improving the service | Legitimate interest | Kept in de-identified form after account deletion |
| Help-chat questions | Answering in real time | Legitimate interest | Not stored by us |
When someone scans a dynamic code, the country is taken from a header added by our hosting/CDN provider and the device type from the browser's user-agent string. Both are reduced to aggregate counters immediately. IP addresses may be processed briefly in memory for rate limiting and security, and are not stored by us. Our hosting provider may keep standard server logs for a short time for security purposes.
Processors
- Paddle.com (Merchant of Record) processes payment and tax data under its own privacy policy. We never see your full card details.
- Hosting and database providers: Cloudflare (application hosting on Cloudflare Workers, DNS, security/CDN, short-lived rate-limit counters, and optional cookieless web analytics; requests are processed in Cloudflare's global network), Neon (PostgreSQL database, EU region, Frankfurt), GitHub (encrypted database backups).
- Email delivery provider: Resend, for sign-in links and service emails.
- AI model provider, only if we switch on AI-written answers in the help chat (currently off: the chat answers from our help center): questions typed into the chat would be sent to it to generate an answer. Please don't include personal data in chat questions.
- Google Safe Browsing / Web Risk: destination URLs of dynamic codes are checked against Google's lists of unsafe sites.
International transfers
Israel benefits from an EU adequacy decision. Where processors are located elsewhere, we rely on appropriate safeguards such as Standard Contractual Clauses.
Your rights
Depending on where you live (for example under the GDPR, UK GDPR, the Israeli Privacy Protection Law or US state laws), you may have the right to access, correct, delete or export your data, and to object to processing. Email support@candorqr.com. You may also complain to your data protection authority.
Cookies
We use one strictly necessary session cookie when you're logged in. We don't use advertising or tracking cookies, so no cookie banner is needed. If enabled, our website statistics (Cloudflare Web Analytics) are cookieless and don't use local storage or fingerprinting. Paddle's checkout may set its own cookies when you open it.
Security and breaches
Data is encrypted in transit (TLS) and at rest by our providers; access is limited to the people who need it. If a security incident affects your personal data, we will notify you and the competent authorities where the law requires it.
California (CCPA/CPRA)
We do not sell or share personal information for cross-context behavioral advertising, and we do not use sensitive personal information to infer characteristics. You can exercise your rights to know, delete and correct by emailing us; we will not discriminate against you for doing so.
Business customers
A Data Processing Agreement (DPA) is available on request.