UglyQR
Legal

Privacy policy

Short and readable. What we collect, what we use it for, and who we share it with. If anything is unclear, email [email protected].

Last updated: June 2026
What we collect

The short list.

Account infoWhen you sign in with Google, we receive your email and basic profile fields, used to identify your account and tie credits to it.
Content you createThe text and URLs you encode, logos you upload, style prompts you write, and the QR images we generate, stored so you can return to your history.
PaymentsPayment is processed by Stripe. We receive the result and a customer reference. Card numbers never touch our servers.
Server logsStandard request logs (IP, user agent, timestamps) kept short-term to operate the service, debug issues and prevent abuse.
AnalyticsAggregated page views and basic usage events via Google Analytics, used to understand what people use and what to improve.

What we use it for

We use your data to provide the service: run the generator, manage credits, show your history, process payments and prevent abuse. We do not use your data for advertising, and we do not sell, rent or trade it.

Who processes data on our behalf

To run the service we rely on a small set of third-party processors, and only send each the data it needs:

Google — sign-in & AI generationStripe — paymentsCloudflare — CDN & abuse protectionHosting providersGoogle Analytics

Cookies

We use cookies that are technically necessary to keep you signed in and to remember your generator inputs across visits. Google Analytics sets its own cookies for aggregated measurement. We do not use advertising or cross-site tracking cookies.

How long we keep data

We keep account data and generation history for as long as your account exists. Server logs are kept short-term. You can request deletion at any time by email, and we'll remove your account and associated data within a reasonable timeframe.

Your rights

You have the right to access the data we hold about you, correct it, have it deleted, receive a portable copy, and restrict or object to certain processing, plus the right to complain to a supervisory authority. To exercise any of these, write to [email protected].

Transfers & changes

Some processors (Google, Stripe) operate globally and may process data outside the EU under appropriate safeguards such as Standard Contractual Clauses. When we change this policy we update the date at the top, and surface material changes in the app.

Any privacy question or request

Access, correction, deletion or anything unclear. It all goes to one place.

[email protected]