Privacy Policy

QR HUDI service (qrhudi.com). Effective August 17, 2026.

1. Overview

This Privacy Policy explains how QR HUDI (the “Service”) collects, uses, and protects the personal data of its users. The Service is operated by Alexander Sergeevich Zabrodov, a sole proprietor (individual entrepreneur) registered in the Russian Federation — Taxpayer ID (ИНН) 631929518290, OGRNIP 326632700131912, Samara, Russia (“we”, “us”, the “Operator”).

By using the Service — including viewing a personal page via its QR code, or signing in to the dashboard — you agree to this Policy.

2. What data we collect

• your email address — when you activate a page and when you sign in to the dashboard;
• a phone number — optional, only if you choose to provide one;
• a hashed version of visitors’ IP addresses — we never store the raw IP address, only a one-way hash of it;
• technical data about page views (device type, referrer, date and time) — used for the view-count statistics shown to the page owner;
• the content you add to your own page yourself (text, images, links).

The Service is currently free — we don’t collect or process payment information. If a paid tier is introduced in the future (see section 10 and our Terms of Service), this Policy will be updated in advance to describe what payment data would be processed and by which payment provider.

3. Partner data

Separately from page owners, we also process data about partners — independent manufacturers and retailers who get dashboard access to manage their own drops (“Partner”):

• a Partner’s email address and company name — entered by us when we create their account manually; there’s no self-signup for partners;
• the content of reports filed against pages belonging to a Partner’s drops, including any contact details a reporter voluntarily left for a reply — these reports become visible to the relevant Partner in their dashboard (see section 6 below).

4. Why we process it

• to provide access to the dashboard and your personal page;
• to identify the page owner and prevent unauthorized access;
• to compile the view-count statistics shown to the page owner and to partners;
• to review reports about page content and route them to the relevant partner for a reply;
• to give partners dashboard access to their own drops;
• to comply with applicable law.

5. Legal basis for processing

We process your data based on your consent, and to perform the service agreement you enter into by activating a page (see our Terms of Service). If you’re located in the EU/EEA/UK, our legal bases under the GDPR are your consent and the necessity of processing to perform that agreement.

6. Where your data is stored

Data is stored on servers located in the Russian Federation. We don’t sell your data or share it with third parties, except where necessary for the Service to function technically (for example, our hosting provider), or where required by applicable law.

One specific exception: if you leave contact details when filing a report about a page’s content, that contact information and the report text are shared with the Partner who owns the drop that page belongs to — solely so that Partner can reply to the report (see section 3).

7. Your rights

You can:

• ask what data we hold about you and where it came from;
• ask us to correct or delete inaccurate or unlawfully obtained data;
• withdraw your consent to processing by emailing the contact address below;
• delete your account and your page at any time from the dashboard.

If you’re a California resident, you have rights under the CCPA/CPRA to know what personal information we hold, to request its deletion, and to opt out of its sale or sharing — we don’t sell or share your personal information with third parties for cross-context behavioral advertising.

If you’re in Canada, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) to access the personal information we hold about you and request its correction. If you believe we’ve mishandled your personal information, you can also file a complaint with the Office of the Privacy Commissioner of Canada.

8. Security measures

We use HTTPS encryption, hash passwords and IP addresses before storing them, and restrict access to the underlying database.

9. Children’s privacy

QR HUDI isn’t directed at children under 13, and we don’t knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us at the address below and we’ll delete it.

10. Changes to this Policy

We may update this Policy, including in connection with introducing paid features (see section 4 of our Terms of Service). Changes affecting how payment data is handled will be announced in advance. The current version is always available at qrhudi.com/privacy.

11. Contact

Questions about this Policy: 3as163@gmail.com.

Home · Terms of Service · DMCA Policy