QRazy

Privacy Policy

Effective 13 August 2026

QRazy (we, us, our) runs qrazy.au and related short-link services. This policy explains what personal information we collect, how we use it, and your choices.

We are based in Melbourne, Australia. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply to us.

Who this policy covers

  • Account holders — people who register, sign in, and manage QR codes.
  • Visitors — people who browse our website without an account.
  • Scan visitors — people who open a tracked short link (for example by scanning a QR code).
  • Form submitters — people who fill in a hosted form opened from a QRazy short link.

Information we collect

Account information

When you create an account, we collect:

  • your email address;
  • a hashed password (we never store your password in plain text).

QR codes you save

If you create a tracked short link, we store the information you provide so we can host the link, redirect visitors, and show you analytics on eligible plans. If you use a team or organisation account, other members of that team may be able to see and manage shared codes according to their access level.

If you generate a direct QR code while signed in, we do not save that content on our servers.

Form submissions (Pro and Team plans only)

If an account holder creates a hosted form QR code, we store the form fields they configure and the answers people submit. Submissions are shown to the account holder (and, for organisation forms, to members with access to that QR code) in the QRazy dashboard.

What is collected depends on the form the account holder built — for example a name, email address, phone number, or free-text message. We do not add extra profiling fields beyond what the form asks for.

Form pages include a short notice that answers are handled via QRazy. Account holders are responsible for telling submitters why they are collecting information and how they will use it, where that is required by law.

Scan analytics (Pro and Team plans only)

When someone opens a tracked short link, we record aggregate statistics for the QR code owner — such as when scans happened, general device and browser type, operating system, and approximate location (city or region and country).

We do not store IP addresses. An IP address may be used briefly to estimate location, then discarded. We keep aggregated counts only.

Location is approximate and may be wrong because of VPNs, proxies, or mobile networks. We do not use analytics to identify a specific person, household, or street address. We try to exclude bots and link previews where possible.

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Cookies

We use a sign-in cookie to keep you logged in after you authenticate. It expires after seven days, or sooner if you log out. Short-link redirects do not set advertising or tracking cookies for people who scan a code.

Server logs

Our servers may temporarily log routine technical data for security and reliability. We do not use these logs to build marketing profiles of scan visitors.

How we use information

We use personal information to:

  • provide, maintain, and improve QRazy;
  • authenticate you and manage your account;
  • host and redirect tracked short links;
  • host form QR codes and store submissions for account holders;
  • show scan analytics to QR code owners on eligible plans;
  • enforce plan limits and prevent abuse;
  • respond to support requests and legal obligations.

How we share information

We do not sell personal information.

We may share information:

  • with infrastructure providers that host our application and database, under confidentiality obligations;
  • with organisation members who can access shared QR codes according to their role;
  • with the account holder who created a hosted form — form submissions are not public and are not sold or used by us for advertising;
  • when required by law, or to protect the rights, safety, and security of QRazy and our users.

When a scan visitor follows a short link, they are redirected to a destination chosen by the QR code owner. That third-party site has its own privacy practices, which we do not control.

International transfers

QRazy is operated from Australia. Personal information we collect is stored and processed on servers located in Australia (including through our infrastructure providers).

If you use QRazy from outside Australia — for example from the European Union, United Kingdom, or elsewhere — your information may be transferred to and held in Australia. Australian privacy law applies to how we handle it, as described in this policy.

How long we keep information

  • Account information is kept while your account is active.
  • Tracked QR codes and analytics are kept while the code exists and your account remains active, unless you delete them or they expire.
  • Form submissions are kept while the related QR code exists. Deleting the QR code removes its stored submissions from our systems.
  • Sign-in cookies expire after seven days, or when you log out.

You can delete tracked QR codes from your dashboard. If you need an account deleted, contact us using the details below.

Security

We use reasonable technical and organisational measures to protect personal information, including encrypted connections (HTTPS) and hashed passwords. No method of transmission or storage is completely secure.

Your rights and choices

Depending on where you live, you may have rights to:

  • access personal information we hold about you;
  • correct inaccurate information;
  • request deletion of your account and associated data;
  • make a complaint to a privacy regulator.

Account holders and scan visitors — to exercise these rights with us, email [email protected].

Form submitters — if you submitted a hosted form and want your data removed, email [email protected].

Age

QRazy is not intended for people under 18. You must be 18 or older to create an account. We do not knowingly collect personal information from anyone we know is under 18. If you believe someone under 18 has registered, contact us and we will take appropriate steps.

Changes to this policy

We may update this policy from time to time. We will post the revised version on this page and update the effective date above. Continued use of QRazy after changes take effect means you accept the updated policy.

Contact us

Questions about privacy? Email [email protected].