Privacy Policy

Last updated: 11.10.2026

This privacy policy describes how 1qr2.com collects, uses, and protects users' personal data, in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the General Data Protection Regulation (GDPR).

1. Data controller

The data controller is the publisher of the 1qr2.com website.

For any question about your personal data, you can contact us via the contact form available on the 1qr2.com website.

2. Data collected

We collect the following data:

  • Account data: email address, password (hashed), profile information you provide voluntarily.
  • QR-code contact data: the information you choose to make visible (name, phone, email, custom message, etc.). You have full control over what is displayed.
  • Order and delivery data: name, postal address, email (when purchasing physical products).
  • Payment data: processed exclusively by Stripe. We do not store your full banking details (card number, etc.).
  • Technical data: IP address, connection logs, browser type, as part of operating and securing the service.

3. Purposes and legal bases

Our data processing is based on the following legal bases:

  • Performance of a contract: managing your account, your QR codes, your orders, and your subscription.
  • Legitimate interest: service security, fraud and abuse prevention, improving our features.
  • Legal obligation: retaining billing data in accordance with Swiss law.
  • Consent: where applicable, for non-essential cookies or optional communications.

4. Data recipients

  • o2switch: the site's hosting provider (servers located in France).
  • Stripe: our payment and subscription-management provider. Stripe acts as an independent data controller for payment data and is certified under the Swiss-U.S. Data Privacy Framework.
  • People who scan your QR codes only see the information you have explicitly chosen to make visible.

We do not sell or rent your personal data to third parties.

5. Data transfers

  • Data hosted by o2switch remains in France (European Union).
  • Payment data is processed by Stripe, which may transfer it to the United States. These transfers are governed by the Swiss-U.S. Data Privacy Framework and/or standard contractual clauses.

6. Retention period

  • Your account data is kept for as long as your account remains active.
  • You can delete your account at any time directly from your profile area. Deleting the account results in the deletion of the associated personal data, subject to legal retention obligations (in particular billing data, kept for as long as required by Swiss law).
  • Technical logs are kept for a limited period necessary for the security and proper functioning of the service.

7. Your rights

In accordance with the FADP and the GDPR, you have the following rights:

  • Right of access
  • Right to rectification
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to data portability
  • Right to object

You can exercise most of these rights directly from your profile area (editing or deleting your account).

For any other request, please contact us via the contact form. We will respond within the legal time limits.

You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) or, where applicable, with an EU data protection authority.

8. Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or destruction. However, no system is completely infallible.

9. Cookies

The site may use technical cookies necessary for the service to function. If any non-essential cookies (analytics or marketing) are used, your consent will be requested.

10. Changes

We may update this policy from time to time. The date of the last update appears at the top of the page. We encourage you to review it periodically.

Terms of use