Privacy Policy
Last updated July 23, 2026
SetQR ("SetQR", "we", "us") is operated by Blue Beacon Creative, LLC. This policy explains what we collect, why, and the choices you have. Questions? Email [email protected].
Who this covers
This policy applies to our website, dashboard, and APIs (the "Service"). It covers two groups: account holders who sign in to create links and QR codes, and visitors who click a SetQR short link or scan a SetQR QR code.
Information we collect
From account holders
- Account details — your name and email, handled by our authentication provider (WorkOS). We never see or store your password.
- Content you create — the links, QR codes, campaigns, and settings you make.
- Billing details — if you subscribe, our payment processor (Stripe) handles your card. We store only your plan, subscription status, and a Stripe customer reference — never card numbers.
From link clicks and QR scans
When someone follows a SetQR link, we log analytics about the event, not the person: timestamp, coarse location (country/region/city derived from IP — we do not store the full IP long-term), device type, browser, operating system, and referrer. This is the analytics you rely on as an account holder.
The conversion pixel (optional)
If an account holder installs our optional conversion pixel on their own site, it tracks page views, scroll depth, clicks, and conversions for that visit only. It is session-scoped and does not use cross-site cookies or build a profile that follows people around the web. See our Cookie & Tracking Policy for detail.
How we use information
- To provide the Service — create and resolve links, render QR codes, and show analytics.
- To operate billing and send service messages (receipts, security notices, product updates you can opt out of).
- To keep the Service safe — detect abuse, fraud, phishing, and malware, and to comply with the law.
We do not sell your personal information.
Sharing
We share data only with processors that run the Service on our behalf, under contract: authentication (WorkOS), payments (Stripe), database/hosting (our cloud provider), and email delivery. We may disclose information if required by law or to protect the Service and its users.
Retention
We keep account data while your account is active. Analytics history is retained per your plan's stated window. Your printed QR codes and short links keep working even after you cancel — deleting a link or your account is what stops resolution. You can delete links and request account deletion at any time.
Your rights
Depending on where you live, you may have rights to access, correct, delete, or export your data, and to object to or restrict certain processing (GDPR/UK GDPR), or to opt out of "sale"/"sharing" (CCPA/CPRA — note we do not sell data). To exercise any right, email [email protected]. We will verify and respond within the time the law requires.
Security
Traffic is encrypted in transit (TLS). Passwords are handled entirely by WorkOS. We restrict internal access and follow least-privilege practices. No system is perfectly secure, but we work hard to protect your data.
Children
The Service is not directed to children under 16, and we do not knowingly collect their information.
Changes
We'll update this policy as the product evolves and revise the date above. Material changes will be announced in-app or by email.
Contact
Blue Beacon Creative, LLC — [email protected]
SetQR early-access list
When you join the early-access list, we collect your email address and record your signup through Kit (formerly ConvertKit), along with the signup date and consent-version reference. We use this information to send SetQR launch updates and your early-access invitation. Joining does not create an account or start a paid subscription. Unsubscribe using the link in any launch email, or contact [email protected] to request removal. We retain your preference so we can respect an opt-out. We use Cloudflare Turnstile and short-lived request rate limits to help prevent signup abuse.