QurlQurl

Legal

Privacy Policy

How Qurl collects, uses, and protects personal data when you use thequrl.com — short links, QR codes, analytics, and billing.

Document version
1.0
Last updated
2026-04-03

Introduction

This Privacy Policy describes how the operator of Qurl ("we", "us") collects, uses, stores, and shares personal data when you use our websites, applications, and services at thequrl.com (the "Service").

We process personal data in accordance with applicable data protection laws, including the UK GDPR and the EU GDPR where those laws apply to you. Capitalised terms used in data-protection contexts follow the meanings in those laws unless defined here.

If you have questions, contact us at support@thequrl.com.

Data we collect

We may collect the following categories of information:

  • Account information: name, email address, authentication identifiers, profile image if you choose to use a social sign-in provider, and workspace or team affiliation.
  • Service and usage data: short links and destination URLs you configure, QR code metadata, click and scan events, approximate geographic information derived from IP addresses, device or browser type, referrers, timestamps, and similar technical metadata needed to operate analytics.
  • Billing data: billing address elements, partial payment method details, subscription status, and transaction records. Payment card numbers are processed by our payment processor; we do not store full card numbers on our servers.
  • Support and communications: messages you send us, including email content and in-product correspondence.
  • Cookies and similar technologies: as described in the Cookies and tracking section.

How we use data

We use personal data to provide, maintain, and secure the Service; authenticate users; process payments; display analytics dashboards; detect abuse and protect users; comply with law; and communicate with you about the Service, including transactional notices and—where permitted—product updates.

We do not sell your personal data. We do not use your destination URLs for unsolicited marketing to your end users.

Data sharing and processors

We share personal data with service providers who process it on our instructions ("processors"), including:

  • Stripe — payment processing, subscription lifecycle, tax and invoicing features offered through Stripe where enabled.
  • Vercel and similar hosting providers — application hosting, edge routing, and operational logging.
  • Email and authentication infrastructure — for transactional email and sign-in where applicable.
  • Database and caching providers — to store Service data and improve performance.

Cookies and tracking

We use cookies and similar technologies to keep you signed in, remember preferences, measure basic product usage, and protect against abuse.

Where required, we will obtain consent before using non-essential cookies. You can control cookies through your browser settings; disabling certain cookies may limit parts of the Service.

Data retention

We retain personal data for as long as your Account is active or as needed to provide the Service. We may retain certain records longer where required by law, for billing and tax compliance, or to resolve disputes and enforce our agreements.

Aggregated or de-identified information may be retained for analytics and product improvement.

Security

We implement technical and organisational measures appropriate to the risk, including encryption in transit, access controls, and separation of production environments. No method of transmission or storage is perfectly secure; we encourage you to use strong passwords and protect your credentials.

Your rights

Depending on where you live, you may have rights to access, rectify, erase, restrict, or object to certain processing of your personal data, and to data portability where applicable. You may also have the right to lodge a complaint with a supervisory authority.

To exercise rights, contact support@thequrl.com. We may need to verify your identity before fulfilling requests.

Third-party sites and end users

Your short links may redirect visitors to third-party websites. This policy does not govern those sites. We advise visitors to review privacy notices on destinations they open.

If you use the Service in connection with individuals in the European Economic Area, the UK, or Switzerland, you are responsible for providing any required notices to those individuals and for obtaining consent where required for your own use cases beyond our processing as a service provider to you.

International transfers

We may process and store data in the United Kingdom, the European Economic Area, the United States, or other countries where we or our subprocessors operate. Where we transfer personal data from the UK or EEA to countries not recognised as adequate, we use appropriate safeguards such as standard contractual clauses approved by relevant authorities, supplemented where appropriate by additional measures.

Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest revision. Where changes materially affect how we use personal data, we will provide additional notice as required by law.

Contact

For privacy enquiries or requests, contact support@thequrl.com.

If we appoint a data protection officer or EU/UK representative, we will publish updated contact details on this page.

This page is provided for transparency and convenience. It is not personalised legal advice. If you need advice about your specific situation, consult a qualified lawyer.