Privacy Policy

1. Information We Collect

Files you upload. When you upload a file, it is stored in Amazon S3 (AWS, us-east-1). Files are automatically and permanently deleted after 7 days. We do not inspect, read, or analyse file contents.

Technical logs. AWS Lambda and API Gateway automatically record standard server logs (IP address, timestamp, HTTP method, response code). These logs are retained for up to 30 days for security and debugging purposes and are never sold.

No cookies, no tracking pixels. We do not use advertising cookies, third-party analytics, or any persistent identifiers.

2. How We Use Your Information

• To generate a presigned URL and QR code for your uploaded file.
• To allow the recipient to download the file via the QR code.
• To automatically delete the file and its link after 7 days.
• To maintain service security and prevent abuse.

We do not use your files or logs for advertising, profiling, or AI training.

3. Data Storage & Security

Files are stored in AWS S3 with server-side encryption (AES-256). Transfer is protected by HTTPS/TLS. Access to files requires a time-limited presigned URL generated at upload time. No file is publicly browseable or listable.

4. Data Sharing

We do not sell, rent, or share your data with third parties for commercial purposes. The only third party involved is Amazon Web Services (AWS), which stores and serves your files under their own Privacy Notice.

5. Your Rights

Because we do not collect personal accounts, most data is anonymous. If you believe a specific file you uploaded contains your personal data and you want it deleted before the 7-day automatic expiry, contact us at privacy@getqrfile.com with the file key from the QR code URL.

6. Children

QR Drop is not directed at children under 13. We do not knowingly collect data from children.

7. Changes to This Policy

We may update this policy. Material changes will be reflected by an updated date at the top of this page.

8. Contact

Questions? privacy@getqrfile.com