Privacy policy
Who we are
Qriva is an online QR code service. This policy describes exactly what we process, why, and what we deliberately do not collect. Contact: elfayad@managementandco.fr.
Static QR codes
Static QR codes are generated entirely in your browser, in JavaScript. Whatever you type — a URL, a WiFi password, contact details — is never sent to our servers, never stored and never logged.
Account data
If you create an account we store your email address, an authentication identifier, an optional display name and your plan. Nothing else.
Dynamic QR codes
For each dynamic QR code we store the name you choose, the destination URL, its status, its colours, an optional folder and its short code.
Scan analytics
When a dynamic QR code is scanned we store exactly four things: the QR code identifier, a timestamp, a two-letter country code and a device family (mobile, tablet or desktop). The visitor's IP address is never stored — it is used in memory only to derive the country and to ignore duplicate scans within about ten seconds, then discarded. The database schema physically cannot hold an IP address or any per-visitor identifier.
Cookies and trackers
The /r/ redirect sets no cookies whatsoever. We use no analytics tool, no advertising pixel and no third-party tracker anywhere on this site. The only storage we use is what is strictly necessary to keep you signed in to your account, which is why there is no cookie banner.
Payments
Paid plans are processed by Stripe, which acts as our payment processor and handles card data and EU VAT. We never see or store your card details; we keep only a customer identifier and your subscription status.
Emails
We send account emails (address confirmation, password reset) and, if you subscribe, a subscription confirmation. We send no marketing email unless you ask for it.
Sub-processors
Qriva is operated by M&C MANAGEMENT AND CO (SIREN 913 164 653), the data controller. The application and its database are hosted and deployed through the Lovable platform, operated by Lovable Labs Incorporated, as identified in its own Terms of Service available at https://lovable.dev/terms. Stripe processes payments and EU VAT. Transactional emails are delivered via Resend when that integration is active; account emails (signup confirmation, password reset) are delivered by the platform's authentication infrastructure. No other third party receives your data.
Your rights
You have the right to access, rectify, export and erase your data, and to object to processing. Your settings page includes a one-click JSON export and a full account deletion. You can also write to elfayad@managementandco.fr, and you may lodge a complaint with your national data protection authority.
Retention
Account data is kept while your account exists and is erased immediately on deletion. Scan events are erased with the QR code they belong to.