Skip to content
QRSong! Logo

Privacy Policy of QRSong!

Last updated: September 23, 2026

Introduction

Welcome to QRSong! (https://www.qrsong.io). We are committed to protecting your privacy. This policy details the information we collect, how it is used and shared, and your rights regarding your data. You can reach us at info@qrsong.io.

Information We Collect

  • Personal Information: We collect your name and address when you are placing an order. This enables us to send the cards to the right address.

Usage Data and Order Tracking

We collect and process the following data related to your order:

  • Order Identification: Each card set is assigned a unique batch number linked to your purchase for order management, quality assurance, customer support, and fraud prevention.
  • Usage Statistics: We track how many cards from your set have been scanned and when they were used. This helps us provide service improvements, customer support, and detect unauthorized redistribution.

Legal Basis: Contract performance (to fulfill your order and provide support) and legitimate interest (to prevent fraud and unauthorized resale of our products).

Sharing Your Information

  • Data Hosting and Storage: We use Amazon Web Services (AWS) Relational Database Service (RDS) to host the data collected. Your personal data is stored securely on AWS, and we do not share it with any third-party services other than for the purpose of data hosting and for the analytics and error reports described under Cookies, Analytics and Session Recordings.

Cookies, Analytics and Session Recordings

When you first visit our website, a cookie banner asks which cookies you accept. Cookies the website needs to work are always on. The analytics described below only start after you accept the Performance category, and stop as soon as you withdraw that choice with the cookie settings button that stays on every page.

  • Product Analytics and Session Recordings (PostHog): With your consent we use PostHog to see how visitors use our website: which pages they open, what they click, and where they get stuck or leave. We also record visits (page changes, clicks, scrolling and what the page showed) so we can replay them and find what does not work. Everything you type into a form is hidden in these recordings, and so are your name, email address and address wherever the website displays them. PostHog uses your IP address to determine your country and city. We use this data only to improve our website, never for advertising, and we do not sell it.
  • Error Reports: When something breaks on our website, a technical error report (the error, the page, and your browser and device type) is sent to PostHog so we can fix it. This also happens without your consent, based on our legitimate interest in a website that works, and it does not set cookies.
  • Processor and Retention: PostHog Inc. processes this data on our behalf on servers in the United States, under a data processing agreement that includes the EU Standard Contractual Clauses. Session recordings are deleted after 30 days. Other analytics data is kept only as long as we need it to improve our website.

Data Security

We take the security of your data seriously. Your personal information is stored securely on AWS, protected with industry-standard encryption protocols both in transit and at rest. We implement stringent security measures to prevent unauthorized access, alteration, and misuse of your data.

Data Retention

Personal information (name, address, email) is retained for as long as necessary to fulfill our contractual obligations and comply with legal requirements, typically 7 years for tax and accounting purposes. Usage data and order tracking information is retained for up to 3 years from purchase for fraud prevention and customer support purposes. You may request deletion of your data at any time, subject to our legal retention obligations.

Service Communications

We may send you transactional emails related to your purchase, including order confirmations, shipping updates, and product-related notifications. If you have opted in to receive marketing communications, we may also send you review requests and promotional emails. You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails or by contacting us.

Your Rights

  • Access, Correction, and Deletion: You have the right to access, correct, or request the deletion of your personal data at any time. To request deletion, use our contact form or email us at info@qrsong.io.
  • Data Portability: You have the right to request a copy of the data we hold about you in a structured, commonly used, and machine-readable format.
  • Right to Object: You have the right to object to this processing if you feel it impacts your personal rights and freedoms. You can exercise this right by emailing us at info@qrsong.io.

International Data Transfers

Data we collect may be processed and stored in any country where our servers or service providers are located. We ensure that data transferred to and from AWS in Frankfurt adheres to stringent data protection standards to maintain the security and confidentiality of your information. Analytics data and error reports are processed by PostHog in the United States, under the EU Standard Contractual Clauses.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of any significant changes by posting the new privacy policy on this page and updating the "last updated" date at the top of this policy.

Contact Us

If you have any questions or concerns about our privacy practices or your personal data, email us at info@qrsong.io or use our contact form.