This policy explains what ManentCode collects and why. We designed the product to collect as little as possible. This is an MVP draft and will be reviewed by counsel before public launch.
1. What we collect
- Account data — your email and authentication info (when you create an account).
- Scan events (for dynamic codes only) — timestamp, coarse location (e.g. city/country), device type, and referrer. We use this to show the code owner aggregated analytics.
Static QR codes (URL, WhatsApp, Pix) don't pass through us, so we don't see those scans at all.
2. What we do NOT do
- No cookies for cross-site tracking.
- No tracking of individuals — scan analytics are aggregated, not personal profiles.
- No demographics. No selling your data.
3. Why we process data
To provide the Service, to show the code owner their analytics, and to keep the Service secure. Our legal basis is legitimate interest in a privacy-preserving form; we will confirm consent requirements per market during legal review.
4. Scan data and privacy
We avoid identifying individuals. Where we need to estimate "unique" scans, we use rotating, hashed signals rather than storing raw identifiers.
5. Account deletion — "anonymize and keep"
When you delete your account, we remove your personal data (and your analytics). To honor the anti-refém promise, the depersonalized mapping that makes a printed code resolve (its short link → destination) may remain, so the QR you put into the world keeps working. If you'd rather retire a code, you can choose to do so — its link then shows a neutral "retired code" page instead of resolving. You decide.
6. Your rights
You can request access to or deletion of your personal data. Contact us and we'll act within the timeframe required by applicable law.
7. Retention
We keep account and analytics data while your account is active, and remove personal data on deletion as above.
8. Contact
Privacy questions: privacy@manentcode.com.