Privacy Policy
Last updated: June 27, 2026
The French version is the legally binding version.
Data Controller
The data controller is MSL INNOV (SAS, RCS Albi 911 004 117), 31 route de Paris, 31140 Aucamville, France. Contact: contact@iloveqr.io.
Data we collect
- Account: email address, name (optional), password (encrypted/hashed — never stored in plain text). If you sign in via Google: email, name, and profile picture provided by Google.
- Dynamic QR codes: title, type, destination/content you configure.
- Scan analytics: scan date, approximate country, device type (mobile/desktop), and referring website. We do not store your IP address.
- Payments: card data is processed directly by Stripe; we do not store it. We retain your purchase history (pack, amount, date) for billing purposes.
Purposes & legal bases
- Provide the service and manage your account — performance of contract.
- Process payments and issue invoices — performance of contract / legal obligation.
- Measure your QR scan analytics — performance of contract (service feature).
- Security and abuse prevention — legitimate interest.
- Audience measurement (Google Analytics) — legitimate interest.
Processors & recipients
We use service providers that process data on our behalf:
- Supabase (database, European Union)
- DigitalOcean (hosting)
- Stripe (payments)
- Resend (transactional email delivery)
- Google (“Sign in with Google” authentication; audience measurement)
Some of these providers may be located outside the European Union (in particular in the United States). Transfers are governed by appropriate safeguards (European Commission standard contractual clauses).
Retention period
Account data is retained for as long as your account is active. Billing data is retained for the applicable legal period (up to 10 years). You may request deletion of your account at any time.
Cookies
We use strictly necessary cookies for operation (session, authentication) as well as audience measurement cookies (Google Analytics) to understand and improve site usage. You can block them at any time via your browser settings.
Your rights
Under the GDPR, you have the right of access, rectification, erasure, restriction, objection, and data portability. To exercise these rights, write to contact@iloveqr.io. You may also lodge a complaint with the CNIL (cnil.fr).