Privacy Policy

Last updated: March 17, 2026

1. Information We Collect

QRSTKR (“we,” “us,” or “our”) collects information you provide directly when using our service, including:

Account Information: Email address, display name, and authentication credentials when you create an account.

Item Information: Details about items you register (make, model, year, nickname, photos, maintenance records).

Shop Information: Business name, address, phone number, email, website, and service categories for registered shops.

Phone Numbers: We may collect and verify phone numbers for shop verification purposes. Verification codes are sent via SMS to confirm business ownership.

Order Information: Shipping address and order details when purchasing stickers.

Usage Data: Standard server logs including IP addresses, browser type, and pages visited.

2. How We Use Your Information

We use your information to provide and improve the QRSTKR service, including to create and maintain your account, process sticker orders, display item information to authorized viewers, facilitate shop verification and service record submissions, send transactional communications (order confirmations, verification codes, service notifications), and prevent fraud and abuse.

3. SMS and Phone Communications

We use SMS messaging solely for shop verification purposes. When a shop registers, we may send a one-time verification code via SMS to the phone number associated with the business listing. We do not send marketing messages via SMS. Message and data rates may apply. You will receive at most one SMS message per verification attempt.

4. Information Sharing

We do not sell your personal information. We share information only in the following circumstances:

Public Item Pages: Item details (make, model, year, photos, maintenance history) are visible to anyone who scans the QR sticker. Contact information is only shown if you opt in.

Shop Records: Service records submitted by shops are visible to the item owner.

Service Providers: We use third-party services including Supabase (database and authentication), Vercel (hosting), Google Maps Platform (business verification), and Twilio (SMS verification). These providers process data as necessary to provide their services.

Legal Requirements: We may disclose information if required by law or to protect our rights and safety.

5. Data Security

We use industry-standard security measures including encrypted connections (HTTPS), row-level security policies on our database, and secure authentication. However, no method of transmission over the internet is 100% secure.

6. Data Retention

We retain your account and item data for as long as your account is active. You may request deletion of your account and associated data by contacting us. Maintenance records associated with items may be retained as part of the item’s provenance history even after account deletion.

7. Your Rights

You may access, update, or delete your account information at any time through your account settings. To request a complete data export or deletion, contact us at the email below.

8. Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes via email or in-app notification.

9. Contact Us

Questions about this privacy policy? Contact us at privacy@qrstkr.com.