Privacy Policy

Last Updated: June 13, 2026

Note (June 13, 2026): The encryption description (§2) was revised for accuracy — encryption is server-side and we decrypt destinations at request time to operate redirects; it is not end-to-end or zero-knowledge.

1. Introduction and Controller Details

This Privacy Policy describes how eqr.link ("we", "us", or "our") collects, uses, and shares personal data when you use our website, web application, and services (collectively, the "Service").

For the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws, the data controller is:

Legal Entity: Piaxonika Software Services SINGLE MEMBER S.A.
Company Number: 179072201000
Address: 3is Septemvriou 144, 112 51 Athens, Greece
Contact Email: support@eqr.link
Data Protection Representative (EU/UK): Not applicable — the controller is established in the EU (Greece)

2. Data We Collect and Processing Purposes

We collect and process personal data only when necessary to provide the Service, comply with legal obligations, or pursue our legitimate interests.

2.1. Account and Profile Data

When you register an account via Google Sign-In (OAuth) or Magic Link (delivered via email), we collect:

Email Address: Used for authentication, account management, and sending transaction/magic link emails.
Google User ID: Used to authenticate your account when logging in via Google.
Lawful Basis: Contract necessity (Art. 6(1)(b) GDPR).

2.2. QR Code Configuration Data

When you create QR codes, we process:

Destination URLs: The URLs you configure for redirects. These are encrypted with a per-user key (derived via HKDF-SHA256 from a master secret) before being stored in our database, so a leak of the database alone does not expose them (the master secret is held in our application environment, not in the database). This is server-side encryption — not end-to-end or zero-knowledge: our redirect service decrypts a destination at request time to route each scan, so Eternal QR can access destination URLs while operating the Service. You can export your key to decrypt your destinations independently of us.
On-Chain Anchoring: The encrypted URL and metadata are anchored to the public, immutable Base L2 blockchain to ensure permanent redirects.
Lawful Basis: Contract necessity (Art. 6(1)(b) GDPR).

2.3. Redirect Analytics Data (Scan Events)

When a third party scans your QR code or clicks a redirect link, we log the scan event to compile analytics. To protect scanner privacy, we do not store raw IP addresses. Instead, we process:

IP Hash: A truncated 16-character SHA-256 hash of the IP address with a fixed application salt, used to count unique visits rather than to identify or track individuals. We do not store the raw IP address.
Technical Metadata: User-Agent string (browser/OS info), screen size, and referer host (domain-only).
Geographic Data: Country code derived dynamically from the Cloudflare edge request (using the CF-IPCountry header).
Lawful Basis: Legitimate interest in providing analytics and detecting abuse/malicious traffic (Art. 6(1)(f) GDPR).

2.4. Hosted Files and Lead Capture Forms

If you use our advanced features:

Hosted Files: Files you upload are stored on our local server disk and are associated with your account or a specific QR code.
Lead Capture Forms: If you enable lead collection, we store the data submitted by scanners in our database. Scanners receive a signed bypass cookie (eqr_lead_submitted_<form_id>) to remember their submission and bypass the form on future scans.
Lawful Basis: Contract necessity for hosted files (Art. 6(1)(b) GDPR); Consent or legitimate interest for lead capture, depending on the B2B configuration (Art. 6(1)(a) or Art. 6(1)(f) GDPR).

3. Data Storage, Location, and Retention

We utilize third-party infrastructure to secure and host your data.

Primary Database: Hosted by Turso (LibSQL) in the European Union (EU).
Edge Routing & Workers: Executed on Cloudflare's global network with zero persistent logging of raw IP addresses.
Transactional Emails: Handled via Resend (US).
Payment Processing: Handled via Stripe (US).
Retention Periods:
- Account Data: Retained until you request account deletion.
- Redirect Logs/Analytics: Retained for up to 90 days before being aggregated or deleted.
- On-chain Metadata: Due to the nature of blockchain technology, transactions anchored to the Base L2 blockchain are public and cannot be deleted or modified. Only encrypted payloads are written on-chain.

4. International Data Transfers

When we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place. These include:

Stripe & Resend (US): Standard Contractual Clauses (SCCs) and/or verification of certification under the EU-U.S. Data Privacy Framework.
Base L2 Blockchain: Anchored payloads are public. Users should avoid embedding unencrypted personal data in redirect URLs or metadata.

5. Your Rights

Under the GDPR and other applicable laws, you have the following rights regarding your personal data:

Right of Access: You can view your account profile and export your encryption keys at any time.
Right to Rectification: You can update your profile information in your dashboard.
Right to Erasure (Right to Be Forgotten): You can request account deletion by emailing support@eqr.link.
Right to Data Portability: You can export your data and encryption keys to decrypt your redirected URLs independently of our Service.
Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in your country of residence.

6. Contact Us

For any privacy-related inquiries, data requests, or complaints, please contact us at: Email: support@eqr.link
Postal Address: 3is Septemvriou 144, 112 51 Athens, Greece