Radius QR

Privacy

What information we collect, why we use it, and your choices.

Effective 15 October 2026. This notice describes the current service.

Information we collect

For accounts, Firebase processes your email address, account identifier, sign-in provider information and authentication activity. We use your account identifier to associate saved QR codes with you. We also record the terms version you agree to, the time of agreement and the acceptance action, linked to your account. Saved records include the name, destination, design, export size, logo, creation and update times, and deletion status. Advanced codes and edits are saved automatically once you are signed in and provide a valid destination.

Unsaved Standard designs and logos selected from your device are processed in your browser. Image URLs you import and Advanced destination URLs used for website-title suggestions are sent to our server for retrieval. The image or website host receives that request, without your browser cookies or sign-in credentials.

If you contact us, we receive your email address, message, attachments and any account details you provide.

Scan information

For Advanced QR codes, we record the time of a visit, the code visited, a random event reference and country when available. We do not store visitor IP addresses, user agents, referrers, cookies or persistent visitor identifiers in scan records. We inspect request headers and bot signals to filter automated traffic. Counts can include repeat visits.

We do not collect scan analytics for Standard codes. Destination websites have their own privacy practices.

Browser storage and security information

We use HTTPS to encrypt information in transit and account access checks to restrict access to saved QR codes and private logos.

Firebase stores a sign-in session in your browser. We also store your theme and last successful sign-in method until replaced or cleared through your browser settings. Gallery caching stays in memory. We do not use advertising pixels or Google Analytics in the app.

Hosting and authentication providers process network information, including IP addresses, to deliver and secure the service. We use temporary identifiers derived from IP addresses to limit repeated website-title and image requests. These expire approximately 24 hours after the latest request and are removed by scheduled cleanup.

Operational error logs can include QR record references and dates. Our application logging excludes URL query strings and automatic request invocation logs.

How we use and share information

We use information to provide accounts, saved codes, redirects and analytics, respond to enquiries, investigate abuse and protect the service. We do not sell personal information or use scan records for advertising.

We share information with the providers below as needed to run Radius QR. We may also disclose relevant information where required by law, or where lawfully necessary to investigate abuse, protect the service or resolve a dispute.

How long we keep information

  • Saved codes stay until you delete them or request account deletion. Deleting a saved code starts a 30-day restore period. Deleting an Advanced QR code also disables its redirect immediately. After that period, scheduled cleanup permanently removes the saved code and its analytics, and deletes logos that are not used by another saved code. You can also permanently delete a code from the Deleted tab before the restore period ends. This removes the saved code immediately and schedules its analytics and unused logos for cleanup. Cleanup can take longer if a retry is needed.
  • Downloading a Standard QR code does not save it to your Radius QR account. Downloaded copies do not expire through Radius QR and cannot be disabled or deleted by us, even if a saved record is removed. The destination website must remain available for the QR code to work as expected.
  • Individual scan events are scheduled for removal after 18 months, or when the QR code or account is permanently deleted, whichever comes first. Scan totals remain until permanent QR code or account deletion.
  • Account deletion removes saved codes, logos, analytics and terms acceptance records from the live service. We keep a minimal record of the completed deletion for 30 days to prevent a backup restore from bringing that data back. This contains an account reference and verification and completion details, not QR destinations or logos. Specific evidence may be retained longer for a legal obligation, ongoing dispute or security investigation.
  • We keep support, privacy and abuse correspondence while needed to respond, investigate issues, resolve disputes or meet legal obligations. We review it periodically and delete information that is no longer needed. You can request deletion of correspondence separately from your account.

Backup and provider records do not disappear immediately when live data is deleted. See Cloudflare recovery history and Firebase privacy information for their retention and deletion periods.

Service providers and overseas processing

  • Google Firebase Authentication handles sign-in and processes authentication data in the United States. See Firebase’s privacy and security information and Google’s privacy policy.
  • Cloudflare hosts the app, saved codes, scan records, logos and redirects. The app and redirects use its global network, so requests may be processed outside Australia. Our Oceania storage preferences do not guarantee Australia-only storage or processing. See Cloudflare’s privacy policy, database locations and logo-storage locations.
  • Gmail handles our support correspondence and attachments, which Google may process outside Australia under its privacy policy linked above.

Access, correction and deletion

Contact radius.qr@gmail.com to request a copy, correction or deletion of your information. We verify account ownership before disclosing or removing private account data. If we cannot fulfil a request in full, we will explain why and any available next steps. See our account deletion instructions.

Privacy complaints

Email radius.qr@gmail.com with your concern and the outcome you would like. We aim to acknowledge complaints within five business days and provide a written response within 30 days of receipt. We will investigate, explain our findings and any action taken, and tell you if we need more time.

If you are dissatisfied with our response, or have not received one within 30 days, you can ask the Office of the Australian Information Commissioner (OAIC) whether it can consider your complaint. Its jurisdiction and eligibility rules apply. Depending on applicable law, you may also contact the privacy regulator in your country.

Changes to this notice

We will update the date when this notice changes. Before a material change to how we collect, use or share personal information, we will explain it through a prominent app notice or direct email to affected account holders. We will obtain consent where required by law.

Contact us

Radius QR is operated by James Quine (ABN 78 768 821 207).

Privacy enquiries: radius.qr@gmail.com.