Privacy Policy
Last updated: March 2026
Your privacy matters to us. This policy explains what data we collect, why we collect it, and how we protect it. QR Album is operated from Bulgaria and complies with the General Data Protection Regulation (GDPR).
1. Who We Are
QR Album is a digital photo album service that lets event hosts collect photos and videos from guests via QR code. You can reach us at support@qralbum.app for any privacy-related questions.
2. What Data We Collect
Account data: your email address and name when you sign up. Content: photos and videos uploaded by you or your guests. Payment data: billing is processed entirely by Stripe — we never see or store your card details. Usage data: basic information about how the service is used (page visits, feature usage) to help us improve the product.
3. How We Use Your Data
We use your data to provide the QR Album service, send transactional emails (account confirmations, expiry reminders, payment receipts) via Resend, and process payments via Stripe. We do not sell your data or use it for advertising.
4. Third-Party Services
We rely on the following GDPR-compliant processors: Supabase (database and authentication), Cloudflare R2 (file storage), Stripe (payment processing), and Resend (transactional email). Each processes only the data necessary to provide their service.
5. Data Retention
Photos and videos are stored for the duration of your plan — 30 days (Free), 180 days (Plus), or 365 days (Pro) — from your event date. After this period plus a 7-day grace period, all files are permanently deleted. Account data is retained while your account is active. You can request deletion at any time by contacting us.
6. Your Rights (GDPR)
You have the right to access the personal data we hold about you, request corrections, request erasure, receive a copy of your data (portability), and object to certain types of processing. To exercise any of these rights, email us at support@qralbum.app. We will respond within 30 days.
7. Cookies
We use session cookies strictly for authentication — to keep you logged in. We also use analytics cookies (Google Analytics 4) to understand how visitors interact with our website — such as which pages are visited and how long sessions last. These analytics cookies are only activated after you give explicit consent via our cookie banner. We do not use advertising cookies or cross-site tracking cookies. You can withdraw your consent at any time by clearing your browser's local storage.
8. Children
QR Album is not intended for users under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.
9. Changes to This Policy
We may update this policy from time to time. If we make material changes, we will notify registered users by email before the changes take effect. The date at the top of this page reflects the most recent update.
10. Contact
For any questions, concerns, or requests related to your privacy, please contact us at support@qralbum.app.