QRhop

Privacy

QR images and results

Scanning and QR creation happen on your device. Only when you consent and press Save does QRhop store the selected QR content, design, title, folder and tags with your account. This includes any information encoded in the QR, such as Wi-Fi passwords; avoid saving sensitive content. Five recent versions are kept. Trashed items become eligible for deletion after 30 days. After your subscription ends, existing items can still be viewed, exported or moved to trash. Contact support to request account and data deletion.

Information used to operate the site

Our hosting provider may process IP addresses, browser information, and access logs to operate the service. Advertising processing is described below and follows visitors’ privacy choices.

Visiting external websites

Opening a link or allowing automatic opening navigates your browser to that website. Its privacy policy then applies. QRhop does not verify or guarantee a destination’s safety.

Advertising and privacy choices

Free public pages may display Google AdSense ads. Google and its advertising partners may use IP addresses, browser and device information, and cookies for ad delivery, measurement, and fraud prevention. Where consent is required, Google’s consent message lets you consent, decline, or manage options. You can change your choices using the privacy and cookie settings link on the page. QRhop does not add QR content or account email addresses to ad requests. We do not request ads for Premium members.

Cafe menu photos

When a cafe owner consents and uploads a photo, QRhop stores it on its server. Only the owner can view a draft photo; applying it to the menu makes it visible on the customer ordering page. Unused photos are eligible for cleanup during a later upload. Do not upload faces or personal information.

Advertising measurement

May we use Google Ads cookies to connect ad visits with a first Premium purchase? With consent, Google receives ad click, device and connection data, an anonymous transaction reference, amount and currency. We do not send QR content, email or customer lists, or use this for personalized ads. Measurement is optional. Declining does not affect features or checkout. Your choice is stored in this browser for 30 days and can be withdrawn in Ad measurement settings in the footer. Google Ads measurement cookies are also configured for up to 30 days. Consent for ads displayed on the site is managed separately through Google’s message.

Product analytics · Google Analytics

Allow anonymous QRhop counts and Google Analytics 4 (GA4)? GA4 sends cookie identifiers, public pages and language, device and approximate region, limited acquisition information and feature events to Google. On checkout, it sends the server-verified first Live Premium payment amount, currency and pseudonymous transaction identifier. We do not send QR contents, destination URLs, filenames, email, Wi-Fi details, customer data or order secrets to analytics. Separate from advertising measurement. GA4 runs only after consent; declining does not restrict features. Your choice and analytics cookies expire within 180 days; withdraw consent here anytime. QRhop keeps counts without visitor identifiers; GA4 links visits from consenting browsers. These metrics are not actual customer counts or total revenue.

Language preference

On your first visit, QRhop uses your browser’s preferred languages. A language you choose from the menu is saved in this browser’s local storage and takes priority on future visits. This setting is not sent to a server. Clear the site’s browser data to reset it.

Optional Google registration and sign-in

When Google sign-in is available, your first sign-in creates an account. We store your verified Google account identifier, email, registration time and last sign-in time for account management and support. We do not merge accounts based only on email. We do not access your Google password, Gmail content or Drive files. Reading and creating QR codes do not require an account.

Sessions and retention

A necessary sign-in cookie lasts up to 30 days; a single-use login challenge expires after 10 minutes. The server stores hashes rather than the cookie values. Expired challenges and sessions are eligible for cleanup. Account information is retained until your account closure or deletion request is processed. Signing out invalidates the current session.

Privacy requests and account deletion

The operating brand is QRhop. Contact the support email below to request access, correction, deletion or account closure. We verify account ownership before processing requests. Information subject to a legal retention obligation is handled under that obligation.

Service providers

Google provides account authentication. OpenAI Sites and Cloudflare provide hosting and account data storage. Information may be processed outside your country. Google scripts load on the sign-in screen. If you subscribe, Paddle provides checkout and payment processing and handles information entered at checkout plus transaction, customer and subscription identifiers. QRhop links payment status, Paddle identifiers, subscription period, refunds and cancellation status to your account, but does not store full card numbers.

Saving selected items

QR Studio

When you consent and save a Studio document, its image or PDF source, QR contents, positions and edits are stored privately with your account. Permanent document deletion also removes the source file; it is separate from the design library’s 30-day trash. Publishing a page exposes its title, description, buttons and supplied Wi-Fi details to anyone. Unpublish to stop public access. With your consent, link checks contact selected URLs from our server and store addresses, responses and check times with your account. Destinations can see the checking server’s connection information. Contact support to request account and data deletion.

Analytics

This page measures visits and button clicks using coarse country, device, browser, language and campaign details. No visitor names, raw IP addresses, tracking cookies or cross-visit identifiers are stored. Privacy signals and known bots are excluded. Reports cover the last 90 days. Expired records are cleaned during subsequent visits or report access. Delete analytics to remove all your records. Free: 1 dynamic QR · last 7 days · 100 valid visit records/month · Premium: Monthly recording limit: 10,000 visits. Links keep working after the limit.

Cafe QR orders

Cafe, menu, table, staff email and order/action records are stored with the account. Customer names and phone numbers are not required. Orders can be viewed for 90 days; older records are cleaned up when the cafe is used. I am authorized to use this receiving account and agree to store and show its QR receiving data and name to customers and on related order pages. Registering a QR does not automatically verify payment. Transfer the order amount and tell staff. Payment status changes after staff checks the actual incoming transfer. Staff calls are retained for up to 24 hours. Optional card linking connects the order to an anonymous membership record; card secrets are not stored in plain text. Stamp records follow the membership retention policy. Use this address to check your order again. Other orders at the table are not shown. Staff can view and process this cafe’s orders and confirm counter payments. They cannot edit the menu or access other cafes.

Customer journeys

I choose to share these answers with this business for recommendations and aggregate analysis. All questions are optional. Keep my responses, stamps and coupons linked to an anonymous card for this business. No age or gender is inferred. Country here is self-reported residence, separate from the visit’s connection country. Responses: 90 days. Coupons: until 90 days after expiry. Membership: 365 days of inactivity. Activity linked to an active card is retained for its stamp balance; other activity up to 365 days. Cleanup runs when data is accessed.

Google · Privacy & advertising

Back to scanner