Privacy policy

• Your email address when you create a QR code.
• Event details such as event name and host name.
• Photos/videos uploaded by your guests.
• Google Drive authentication (scoped only to the folder we create).

WeddingQR requests limited, read/write access to your Google Drive in order to create and manage a private folder for your event. We do not have access to any other files, folders, or data in your Google Drive.

WeddingQR processes files in the app-created folder to provide uploads, private previews and requested keepsake PDFs. Originals remain in your Google Drive, and you control its sharing settings.

• To generate your personalized QR code and link it to your private Drive folder.
• To allow guest uploads to your event folder.
• To provide customer support if needed.

We do not sell your personal information or guest content. We use Google Drive for media storage, Supabase for application data, Stripe for payments, Vercel for hosting and Resend for service emails. These providers process the information needed to deliver their services.

We use industry-standard security protocols and Google OAuth2 authentication to protect your data. We store the Google authorization tokens needed to maintain your connection in our protected application database. Media may be processed temporarily for the features you request.

We use first-party analytics, Vercel Analytics, Vercel Speed Insights, and Google Analytics to understand site usage and performance. We collect page categories, feature interactions, broad country and device type, campaign labels, and random browser and session identifiers. We use this to understand where setup fails and improve the service. We do not include names, email addresses, form contents, filenames, photos, or private access links in these analytics.

Our first-party analytics use browser storage for up to 180 days and a session cookie that expires after 30 minutes of inactivity. We respect Do Not Track and Global Privacy Control. Previously saved opt-outs remain respected. Google Analytics also uses browser cookies. Third-party page tracking excludes private guest, owner, and authorization pages and strips query strings and fragments.

We also keep operational records of payments, refunds, upload verification, errors and service delivery. These are separate from browsing analytics. First-party analytics records are retained for up to 400 days; pseudonymous abuse-prevention counters are removed after two days. Payment and account records have separate operational retention needs.

You may revoke WeddingQR’s access to your Google Drive at any time through your Google account permissions page. Deleting your event or QR code does not delete files from your Drive—they remain in your control.

For any privacy-related questions or concerns, please contact us at hello@weddingqr.codes.