Privacy Policy

1. Information We Collect

Data We DON'T Collect

• QR Code Content: We don't store the text, URLs, or data you enter to generate QR codes
• Personal Information: No names, email addresses, phone numbers, or contact details
• User Accounts: No registration, login, or user profiles required
• Tracking Data: No cookies, fingerprinting, or behavioral tracking
• Location Data: No GPS coordinates or location-based information

Technical Data We May Collect

2. How We Process Your Data

QR Code Generation Process

1. Input Processing: Your text/URL is processed locally in your browser when possible
2. Server Generation: For complex QR codes, data is temporarily processed on our server
3. Immediate Deletion: All input data is deleted immediately after QR code generation
4. No Storage: Generated QR codes are not stored on our servers
5. Secure Transmission: All data transmission uses HTTPS encryption

Data Processing Principles

• Minimization: We collect only what's absolutely necessary for functionality
• Purpose Limitation: Data is used only for its intended purpose
• Accuracy: We ensure data accuracy and prompt correction
• Storage Limitation: Data is kept only as long as necessary
• Security: Appropriate technical and organizational measures protect data

3. Third-Party Services

Google AdSense (When Applicable)

If we implement Google AdSense in the future, the following applies:

• Google may use cookies and web beacons to serve relevant ads
• You can opt out of personalized advertising at Google Ad Settings
• We don't share your personal data with Google beyond what's automatically collected
• Ad serving is subject to Google's privacy policy

Content Delivery Network (CDN)

We use CDN services for faster content delivery:

• Static assets (CSS, JavaScript, images) may be served through CDNs
• CDNs may log IP addresses for security and performance purposes
• No personal data is transmitted to CDN providers

4. Data Security

Security Measures

• HTTPS Encryption: All data transmission is encrypted using TLS 1.3
• Secure Headers: Content Security Policy, HSTS, and other security headers
• Input Validation: All user inputs are validated and sanitized
• Regular Updates: Security patches and updates are applied promptly
• Access Controls: Strict access controls for server infrastructure

Data Breach Response

In the unlikely event of a data breach:

1. We will assess the scope and impact within 24 hours
2. Affected users will be notified within 72 hours
3. Regulatory authorities will be notified as required
4. Immediate steps will be taken to contain and remedy the breach

5. Your Rights

Privacy Rights

Under applicable privacy laws (GDPR, CCPA, etc.), you have the right to:

• Access: Request information about data we process (minimal in our case)
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing of your personal data
• Restriction: Request restriction of processing

Exercising Your Rights

Since we don't collect personal data, most rights requests are automatically fulfilled by our privacy-by-design approach. For any questions or concerns, contact us using the information below.

6. International Data Transfers

Our service is hosted on secure cloud infrastructure. If data crosses international borders:

• Transfers are protected by appropriate safeguards
• We ensure adequate protection levels in destination countries
• Standard contractual clauses are used where applicable
• Data subjects' rights remain protected regardless of location

7. Children's Privacy

Ukiyo QR is safe for users of all ages:

• We don't knowingly collect personal information from children under 13
• No age verification is required as we don't collect personal data
• Parents can safely allow children to use our service
• Educational use is encouraged and supported

8. Changes to This Policy

We may update this privacy policy to reflect:

• Changes in our data processing practices
• New legal requirements or regulations
• Improvements to our privacy protections
• User feedback and suggestions

Material changes will be communicated through:

• Updated policy posted on our website
• Notice on our homepage for 30 days
• Email notification if we have your contact information

9. Legal Basis for Processing

Our legal basis for processing data includes:

• Legitimate Interest: Providing QR code generation services
• Consent: When you voluntarily use our service
• Legal Obligation: Compliance with applicable laws
• Vital Interest: Protecting security and preventing abuse

10. Contact Information

For privacy-related questions, concerns, or requests:

• Email: brianyabutech@gmail.com
• Response Time: Within 48 hours
• Data Protection Officer: Available upon request
• Postal Address: Available upon request for legal purposes

This privacy policy demonstrates our commitment to protecting your privacy while providing a valuable QR code generation service. Your trust is important to us, and we work continuously to earn and maintain it.