Security

How We Protect the Platform

We use safeguards designed to protect customer accounts, QR Codes, scan analytics, and service operations. These include:

• HTTPS and encryption in transit

• Access controls and limits on administrative access

• Secure session controls

• System monitoring and software updates

• Backups and recovery procedures

• Security and abuse monitoring

• Limited access to customer information based on operational need

No online service can guarantee absolute security. We continually maintain and improve our safeguards as the Services and risks change.

Cloud Infrastructure and Independent Assurance

Our application infrastructure uses DigitalOcean's cloud platform. DigitalOcean maintains SOC 2 Type II and SOC 3 Type II certifications issued by independent auditor Schellman & Company. DigitalOcean also makes security and compliance information available through its Trust Platform.

View DigitalOcean's certification reports: https://www.digitalocean.com/trust/certification-reports

We combine DigitalOcean's infrastructure controls with our own application-level safeguards, access controls, monitoring, updates, and backup procedures.

Privacy-Conscious Scan Analytics

A person does not need to provide a name, email address, phone number, postal address, or other direct identifier to scan one of our QR Codes.

To redirect a scan and provide analytics, we may process limited technical and location-related information such as scan time, device and operating-system information, Internet Protocol address, approximate location, and data used to estimate unique scans. If a feature requests more precise location, the scanner must first grant browser or device permission.

Customers can view analytics for the QR Codes they manage, but a standard scan alone does not give them a scanner's name, email address, phone number, or other direct contact information.

Read our Privacy Policy: https://www.qr-codes.com/privacy-policy

Payment Security

Stripe processes full payment card details through Stripe's payment interface. QR-Codes.com receives limited billing and transaction information needed to manage subscriptions and payments. We do not receive or store a full payment card number or card security code through that interface.

Learn about Stripe security: https://stripe.com/docs/security

Reliability and Continuity

Our QR Code redirection service is designed for dependable, ongoing use. We use monitoring, backups, and recovery procedures to support service continuity. Our historical availability has been close to 100% since 2012.

Report a Security Concern

If you believe you have found a security issue involving QR-Codes.com, email info@qr-codes.com with the subject line "Security Report."

Please include:

• A description of the issue

• The affected page, QR Code, account feature, or URL

• Steps that would help us reproduce the issue

• Your contact information if you would like a response

Do not access, change, copy, or delete data that does not belong to you. Do not disrupt the Services, use automated attacks, or publicly disclose a possible vulnerability before we have had a reasonable opportunity to investigate it.

Last Updated: September 1, 2026