Privacy Policy

Last Updated: September 2026

Print Policy

This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use the Service. It also outlines our data practices regarding public end-users who scan QR codes generated on our platform.

We use Your Personal data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

  • Account means a unique account created for You to access our Service or parts of our Service.
  • Company (referred to as either "the Company", "We", "Us" or "Our") refers to Profecio, LLC, 11 27th Ave #204 Venice, CA 90291.
  • Cookies are small files that are placed on Your computer or mobile device containing the details of Your browsing history on that website.
  • End-User refers to any member of the public who scans a QR code generated by our Service.
  • Personal Data is any information that relates to an identified or identifiable individual.
  • Service refers to the QR Star Website and our dynamic QR routing infrastructure.
  • Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.

Collecting and Using Your Personal Data (Account Holders)

While using Our Service as a registered user, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You, including, but not limited to, Your email address and billing information.

We use this data to provide and maintain our Service, manage Your Account, process payments, and contact You regarding updates, security alerts, and necessary platform changes. We also automatically detect and store your local browser timezone to ensure your dashboard analytics and scan reports are accurately localized to your region.

Data Collected from QR Code Scans (End-Users)

QR Star provides dynamic routing and analytics for QR codes. When an End-User scans a QR code generated on our platform, we automatically collect specific diagnostic and usage data to provide scan analytics to the Account holder who created the code.

IP Anonymization & Geolocation: To provide geographic scan insights (country and city), we temporarily process the End-User's Internet Protocol (IP) address. We do not store raw IP addresses in plain text. Immediately upon lookup, the IP address is mathematically anonymized using a cryptographic one-way hashing algorithm (HMAC-SHA256). This ensures the recorded data cannot be reverse-engineered to identify the End-User's original IP address.

Other anonymized Usage Data collected during a scan includes:

  • The time and date of the scan
  • The device type and operating system (via User-Agent strings)
  • The referring URL (if applicable)

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies to track the activity on Our Service and store certain information for registered Account holders. We do not inject tracking cookies into the browsers of End-Users simply scanning a dynamic QR code.

Retention of Your Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements.

Anonymized scan Usage Data is retained indefinitely to provide historical analytics to our Account holders.

Disclosure of Your Personal Data

We do not sell Your Personal Data. We may share Your information in the following situations:

  • With Service Providers: To process payments, monitor platform usage, provide security scanning, or operate necessary infrastructure (e.g., Stripe, MaxMind, Google Web Risk).
  • For Business Transfers: In connection with any merger, sale of Company assets, financing, or acquisition.
  • Law Enforcement: If required to do so by law or in response to valid requests by public authorities.

Security of Your Personal Data

The security of Your Personal Data is strictly important to Us. We utilize HTTPS encryption, secure database configurations, and cryptographic hashing for sensitive data. However, remember that no method of transmission over the Internet is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

Contact Us

If you have any questions about this Privacy Policy, You can contact us via our contact page.

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Have a question?

Not sure exactly what you're looking for or just want clarification on how we handle scan data?

Send us a note anytime. We’d be happy to chat with you and clear things up!

Contact Us
$debug = $debug ?? (defined('DEBUG') ? DEBUG : false);