Privacy, in plain words
What QRcodePLUS.pro collects, why, and what you can do about it. 2nd Look Media runs the service and is responsible for your data.
Last updated 30 October 2026.
If you make codes
We keep what you give us so the service works:
- Your email address, your name if you add one, and a securely hashed password. You can also log in with an emailed link instead.
- What you make: codes and where they point, designs and logos, link pages, forms and the answers people send them, uploaded PDFs, folders, tags and your team.
- Your plan, and, once paid plans open, a reference to your subscription. Card details never reach us.
If you scan a code
When someone scans a code made here, we record what the code’s owner needs to count it:
- The time, the kind of device, its operating system and browser, and the country and city worked out from the connection.
- A one-way fingerprint made from the connection’s address, the browser and the workspace, so a repeat scan counts once. We never store the address itself.
- Exact location only if the code’s owner switched it on and you say yes when asked. It’s rounded to about 100 metres. Say no and you go straight on.
The owner of the code sees these as totals and charts. They can download them on Business plans.
Cookies
Only the ones the service needs: one to keep you logged in and one to remember which workspace you were in. If you start a code before signing up, your draft waits in your own browser until you finish. No advertising or tracking cookies, so there’s no cookie banner.
Who helps us run it
These companies process data for us, only to run the service:
| Service | What it does | Where |
|---|---|---|
| Cloudflare | Hosts the site and app, forwards every scan, and stores uploaded files. | Worldwide network |
| Supabase | Runs the database and sign-in: accounts, codes, pages, forms and scan counts. | The region chosen for the production project |
| Amazon Web Services (SES) | Sends account emails: confirmations, password resets, invites and alerts. | The AWS region SES runs in |
| Google Web Risk | Checks the web addresses codes point to against Google’s list of unsafe sites. Only the address is sent. | Google’s servers |
We don’t sell data, and we don’t show ads to the people who scan your codes.
How long we keep it
- Your account and everything in it, until you delete the account. Deleting it removes your workspaces, codes, pages, forms and uploads.
- A code’s scans for as long as the code exists. Your plan decides how far back you can look: 90 days on Free, a year on Pro, all of it on Business plans. Deleting the code deletes its scans.
- Deleted codes wait in Deleted for 30 days so you can bring them back, then they’re gone.
Your choices
- See and change your details in your account settings.
- Delete your account from account settings. It happens straight away.
- Ask us for a copy of your data, or about anything on this page: 2ndlookmedia.com.
Depending on where you live you may have further rights, such as to object or to complain to your data protection authority. We’ll update this page when something changes and show the date at the top.