Privacy Policy

1. Introduction

StackedPixels ("we", "us", or "our") provides a QR code creation and analytics platform. This Privacy Policy explains how we collect, use, and protect your information when you use our service. By using StackedPixels, you agree to the practices described in this policy.

2. Information We Collect

Account Information

• Email address and display name provided during registration
• OAuth profile data when signing in with Google or Microsoft (name, email, avatar)

QR Code Data

• QR code content, labels, and configuration you create
• Associated design settings and customization options

Scan Analytics

When someone scans a QR code created on StackedPixels, we collect:

• IP address
• Approximate geolocation (country, city)
• Device type, operating system, and browser
• Timestamp of the scan

Payment & Billing Information

Subscription billing is handled by third-party billing providers — Helcim for merchants located in the United States, and Polar for merchants located in all other countries (including Canada). We store provider-issued customer and subscription identifiers and your billing status; we do not store credit card numbers or full payment details on our servers.

Merchants who accept buyer payments through StackedPixels-hosted landing-page storefronts connect a Stripe Connect Express account. We store the connected account identifier issued by Stripe; we do not receive or store the merchant's underlying Stripe API credentials. All charges, refunds, and transaction lookups are performed via the Stripe Connect platform integration, which authorizes StackedPixels to act on the merchant's connected account for the limited purposes described in the Terms of Service.

For platform-fee invoicing, we share limited billing data (the merchant's name, email address, billing period, and fee amount) with our billing providers so they can deliver invoices and accept payment. Buyer payment data flows directly between the buyer and Stripe (acting on behalf of the merchant's connected account) — StackedPixels does not receive or store full buyer payment details.

3. How We Use Your Information

• Provide, maintain, and improve the StackedPixels platform
• Display scan analytics and insights on your dashboard
• Process billing and manage subscriptions
• Send transactional emails (organization invitations, password resets)
• Enforce usage limits based on your subscription tier

4. Third-Party Services

We rely on the following third-party services to operate StackedPixels:

We use trusted third-party services for authentication, database storage, payment processing, email delivery, content delivery, and application hosting. Each service operates under its own privacy policy.

Each service operates under its own privacy policy. We encourage you to review their policies for details on how they handle data.

5. Data Retention

Scan analytics data is retained based on your subscription tier:

When you delete your account, all associated data — including QR codes, analytics, and organization membership — is permanently removed via cascade deletion.

6. Data Sharing Within Organizations

If you are part of an organization on StackedPixels, other members of that organization can view shared QR codes, their scan analytics, and your email address. Organization admins can manage members and roles. Data is never shared between separate organizations.

7. Cookies & Sessions

We use secure session tokens stored in your browser to keep you signed in. Sessions automatically expire after 30 minutes of inactivity. We do not use third-party tracking cookies or advertising pixels.

8. Your Rights

• Account deletion — You can delete your account and all associated data from your account settings at any time.
• Data export — You may request a copy of your data by contacting us at the email below.
• Opt-out — You can remove your account from an organization or stop using the service at any time.

9. Security

We take reasonable measures to protect your data, including encrypted password hashing, row-level security policies on all database tables, role-based access controls within organizations, and HTTPS for all data in transit.