QR Privacy Policy
What happens, data-wise, when you scan an ONBRAND-powered QR code.
Effective June 10, 2026 · Onbrand Online LLC · josh@onbrand.online
Who this covers
The ONBRAND QR Codes module lets Shopify merchants create QR codes for packaging, print, ads and more — with scan tracking and the ability to change a code's destination after printing. That means two kinds of people touch this system: you scanned a code somewhere, or you're a merchant using the app. Both are covered below. For the onbrand.online website itself, see our site privacy policy.
If you scanned a QR code
When you scan a merchant's ONBRAND QR code, your phone briefly loads our redirect service, which records a scan event and immediately sends you on to the merchant's page. A scan event includes:
- the time of the scan and which code or campaign it belongs to,
- your device type and browser (the user agent string), and
- your IP address — used to count unique scans, estimate a coarse region (country or city level, never precise GPS), and prevent abuse.
A scan does not capture your name, email, phone number, contacts, or anything stored on your device, and we cannot personally identify you from it. Scan data is shown to the merchant as analytics — scan counts, device mix, regions, and campaign performance.
The link you land on may carry attribution parameters so that if you go on to buy something, the merchant's store can credit the QR campaign. Anything that happens on the merchant's site after the redirect — cookies, checkout, marketing — is governed by that merchant's own privacy policy and Shopify's, not this one.
If you're a merchant
We process scan analytics on your behalf as a service provider. Your store and account data are handled per the app listing and Shopify's API terms; we honor Shopify's mandatory privacy webhooks, including customer data requests, customer redaction, and shop redaction — so uninstalling the app or filing a redaction request removes the associated data.
Retention
Scan analytics are retained while the merchant's installation remains active, so their campaign history keeps working, and are removed in response to uninstalls and redaction requests as described above.
Service providers
The QR system runs on Shopify (commerce platform) and Cloudflare (hosting and redirect infrastructure). We don't sell or rent scan data to anyone.
Your choices
Questions or removal requests about a scan? Email josh@onbrand.online. If your question is about a specific store's marketing, the merchant whose code you scanned is usually the faster door to knock on — they control that relationship.
Changes
If this system's data handling changes, we'll update this page and the effective date above.
