Privacy Policy

The data controller is Denis Malov s.p., Mlinska ulica 22, 2000 Maribor, Slovenia (tax number 14795914).

For any privacy question or request, contact support@enqre.com.

Account data: your email address, your name (if provided) and an encrypted password, or your Google account identifier if you sign in with Google.

Content data: the QR codes, links, text and images you create or upload.

Scan analytics: when someone scans your QR code we record the time, device and browser type, the referrer, and a truncated, salted hash of the IP address used solely to count unique visitors. We do not store the full IP address and do not derive your location.

Billing data: for paid plans, limited billing information handled by Stripe. We do not receive or store full card numbers.

Technical data: essential cookies and server logs needed to operate and secure the service.

To provide the service and manage your account — performance of a contract (Art. 6(1)(b) GDPR).

To secure, maintain and improve the service and produce aggregate analytics — our legitimate interests (Art. 6(1)(f) GDPR).

To process payments and meet accounting and tax obligations — contract and legal obligation (Art. 6(1)(b) and (c) GDPR).

Optional marketing or retargeting pixels on scan pages — only with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

We use strictly necessary cookies to run the site and keep you signed in. These do not require consent.

Optional retargeting pixels (for example Meta, Google, TikTok or LinkedIn) run on scan pages only if the code owner enables them and the visitor consents through the cookie banner. You can change or withdraw consent at any time via “Cookie settings”.

Payments are processed by Stripe Payments Europe, Ltd. Stripe acts as an independent processor and handles your card data directly; we never see or store full card details. Please see Stripe’s privacy policy for how it processes your data.

We share data only with service providers who process it on our behalf: our hosting provider (servers located in Germany, EU) and Stripe for payments. We do not sell your personal data.

We may disclose data where required by law or to protect our legal rights.

Your data is hosted within the European Union (Germany). Where a processor transfers data outside the EEA, it is protected by appropriate safeguards such as the EU Standard Contractual Clauses.

We keep account and content data for as long as your account is active. When you delete your account we delete or anonymize your personal data within 30 days, except records we must keep to meet legal obligations (such as invoices).

Scan analytics are retained for up to 24 months and then deleted or aggregated.

Under the GDPR you have the right to access, rectify, erase, restrict or object to processing, and the right to data portability. Where processing is based on consent, you can withdraw it at any time.

You can export your data or delete your account directly in your account settings.

To exercise your rights, contact support@enqre.com.

If you believe your data is processed unlawfully, you may lodge a complaint with the Slovenian Information Commissioner (Informacijski pooblaščenec, www.ip-rs.si) or with your local supervisory authority.

We use appropriate technical and organizational measures — including encryption in transit, hashed passwords and access controls — to protect your data. No method of transmission or storage is completely secure.

Enqre is not intended for children under 16, and we do not knowingly collect data from them.

We may update this Policy from time to time and will post the new version with an updated date. For material changes we will provide notice where appropriate.

Data controller: Denis Malov s.p., Mlinska ulica 22, 2000 Maribor, Slovenia. Email: support@enqre.com.