Privacy policy

Last updated September 12, 2026

What we collect

When you create an account, we collect your email address and name, and a password (stored encrypted) if you sign up that way. If you sign in with Google instead, we receive your name, email, and profile picture from Google — we never see your Google password.

We also store the QR codes and short links you create, and basic scan counts for your own analytics dashboard. We don't collect anything beyond what's needed to run the product.

Cookies and local storage

We don't use advertising, analytics, or tracking cookies — no Google Analytics, no ad pixels, nothing that profiles you across sites. The only browser storage we use is:

  • A login token saved in your browser's local storage, so you stay signed in.
  • If you sign in with Google, a short-lived, strictly-necessary session cookie during that sign-in step only, used for security (it protects the login handshake) — not for tracking.

Because these are strictly necessary for the product to work, we don't show a cookie consent banner. If that ever changes — for example, if we add analytics — we'll update this page and ask for your consent first.

Payments

Billing is handled by Stripe on Stripe's own hosted checkout page — we don't see or store your card details, and any cookies Stripe sets during checkout are on Stripe's domain, governed by Stripe's own privacy policy.

Your rights

You can ask us to see, export, or delete the personal data we hold about you at any time — just email us (below) and we'll respond within 30 days. If you're in the EU or UK, this covers your rights under GDPR; if you're in California, it covers your rights under the CCPA.

Contact us

Questions about this policy, or a data request? hello@cheetags.com