Privacy

Your account

You sign in with Google. We receive and store your name, email address and profile picture from Google, plus Google's id for your account. We don't receive your Google password and can't see anything else in your Google account.

Your QR codes

We store the web addresses you enter, the names you give your codes, and a history of when you changed each destination.

When someone scans a code

We record the time, the country (worked out from the network, not GPS) and the device type (iPhone, Android, desktop or other). We don't record IP addresses, names or anything that identifies the person who scanned.

Payments

If you pay for Premium, your card details go directly to our payment provider. We only keep the amount, date and status of each payment.

Button codes

When a guest taps a request on a button code, we keep the request, any note they type, and a random code stored in a cookie on their phone. That random code doesn't identify the person. It only stops the same phone sending repeat or prank requests, and lets the business block a phone that misuses its buttons. Requests are deleted after 30 days.

If a business connects Telegram, its requests are also sent to the Telegram chat it chooses.

Reports

If you report a QR code, we keep what you write and, if you give it, your email address so we can reply. To limit repeated reports we keep a one-way scrambled value made from your network address and the date, which can't be turned back into the address.

Cookies

We use one cookie to keep you signed in, and one on button code pages to limit repeat requests (see above). No advertising or tracking cookies.

We count visits to our pages with Cloudflare Web Analytics, which doesn't use cookies or track individual visitors. It tells us totals like page views, countries and which sites sent people here.

Deleting your data

You can delete any code and its scan history from its page. To delete your whole account, email us.

Misuse

We switch off codes that point to scams, malware or illegal content, and may block accounts that create them.

Contact

Questions, deletion requests or abuse reports: hello@atolltokens.com