Draft for review. Last updated: October 2026.
When someone scans a permanent code we record only: the time of the scan, a coarse device class (mobile / tablet / desktop / bot) derived from the browser's user-agent, and the referring website's host name if one is sent. We do not store IP addresses, full user-agent strings, cookies, or any identifier, and we cannot tell who scanned.
We store your email address (to log you in), your codes and their destinations, and your purchase records. Payments are processed by PayPal; we never see or store your card or bank details. We keep the PayPal transaction ID for each purchase. Login emails are sent by our email provider.
If you join the launch waitlist we store only your email address and the date, and use it only to tell you when paid codes launch. If you submit an abuse report we store what you enter (the link, reason, details and optional email) to review it. We may send reported or new destination URLs to Google Safe Browsing to check for known threats. Report-form submissions are rate-limited using a temporary record of your IP address, deleted within 24 hours.
Static codes are created entirely in your browser. The text you enter is not sent to us.
We use a single essential session cookie when you are logged in. No advertising or tracking cookies.
Email support@tenureqr.com to export or delete your data. Deleting your account deactivates your codes.