Privacy Policy

1. Information We Collect

When you create an account, we collect your email address and name. When you use our QR code management features, we collect data about your links and QR codes. When someone scans a dynamic QR code, we collect anonymized scan analytics including device type, browser, country, and city.

On public pages (including the free QR generator), we also collect product and traffic metrics through third-party analytics tools, as described in Sections 2 and 7. Those metrics do not include the content you type into the free static generator.

2. Free QR Generator

Our free static QR code generator builds the code in your browser. The content you type—URLs, Wi‑Fi credentials, vCard fields, message text, and similar payload data—is not uploaded to reRoute servers and is not stored by us. Static codes you download are not hosted or tracked by reRoute after download.

Separately, we measure how people use the tool so we can improve the product. Usage events may include the QR type selected (for example "url" or "wifi"), export format, whether a download completed, whether a logo was added (yes/no only), page path, and which upgrade prompts were shown. These events never include the destination URL, Wi‑Fi password, contact details, or other payload content.

3. How We Use Your Information

We use your information to provide and improve our services, display scan analytics on your dashboard, understand product usage on the public site and free generator, send transactional emails (e.g., team invitations), and communicate product updates.

4. Data Sharing

We do not sell your personal information. We share data with service providers necessary to operate our platform, including:

• Prisma Data Platform — PostgreSQL database hosting
• Resend — transactional email
• Stripe — payments
• Google Analytics 4 — site traffic and product usage metrics on public pages
• Microsoft Clarity — session analytics and heatmaps on public marketing and generator pages (not inside the signed-in dashboard)

These providers process data under their own terms and privacy policies. We configure them for our product and marketing needs; we do not sell personal information to them.

5. Data Retention

We retain your account data for as long as your account is active. Scan analytics are retained for the duration of your subscription unless you configure a shorter retention period where the product allows it. Analytics held by Google or Microsoft is retained according to those providers' settings and policies. You may request deletion of your reRoute account data at any time by contacting us via email.

6. Security

We use industry-standard security measures including encryption in transit (TLS), workspace-scoped access on every database query, and authentication handled inside our own application. All passwords are stored as salted one-way hashes and never in plaintext. API keys are stored as one-way hashes.

7. Cookies & Tracking

We use essential cookies for authentication sessions and user preferences (for example theme). On public marketing and free generator pages we also use Google Analytics 4 and Microsoft Clarity. Those services may set their own cookies or use local storage to distinguish sessions and measure usage.

Microsoft Clarity session recording is limited to public pages. It is not loaded on the signed-in dashboard, onboarding, or auth flows, so workspace destinations and customer analytics are not replayed into Clarity.

Free generator usage events are metadata only (event name, QR type id, format, page path, and similar dimensions)—never the encoded destination or contact/Wi‑Fi content. Scan analytics for dynamic QR codes are collected server-side by reRoute without placing reRoute cookies on the scanner's device.

We do not use advertising retargeting pixels on reRoute marketing pages by default. Workspace owners may configure their own retargeting pixels on dynamic link destinations they control; those are the customer's responsibility and are described in product settings where available.

8. Your Rights

You have the right to access, correct, or delete your personal data at any time. You can export your link and analytics data from your dashboard. To request account deletion or a full data export, contact us at the email below. We will process your request within 30 days. For data held solely by Google Analytics or Microsoft Clarity, you may also use those providers' consumer tools and browser controls where available.

9. Contact Us

If you have questions about this privacy policy, contact us at loading....