Privacy Policy

1. Overview

We take the protection of your personal data very seriously. This privacy policy explains what data we collect and how we use it when you use KuhArr.

2. Data Controller

The data controller responsible for data processing on this website is:

Molzahn Software
Lommelstrasse 1
85101 Lenting
E-Mail: sven-eric@molzahn-software.de

3. Data We Collect

3.1 Account Data

When you create an account, we collect:

  • Email address
  • Encrypted password (we never store passwords in plain text)

3.2 QR Code Data

When you create QR codes, we store:

  • The URLs you configure (iOS, Android, Web, Fallback)
  • QR code styling preferences (colors, logo URL)
  • Aggregate scan statistics (total scans, scans by device type)

3.3 Analytics Data

When someone scans your QR code, we collect:

  • Device type (iOS, Android, Desktop) - derived from User-Agent header
  • Timestamp of the scan

We do not collect IP addresses, precise location data, or personally identifiable information from QR code scanners.

4. Purpose of Data Processing

We use your data for the following purposes:

  • To provide and maintain our service
  • To manage your account and authenticate your access
  • To redirect QR code scanners to the appropriate destination
  • To provide you with scan analytics
  • To communicate with you about your account (if necessary)

5. Legal Basis (GDPR)

The processing of your data is based on:

  • Contract performance (Art. 6(1)(b) GDPR) - to provide the service you signed up for
  • Legitimate interest (Art. 6(1)(f) GDPR) - for security and fraud prevention

6. Data Storage

Your data is stored on Firebase (Google Cloud Platform) servers. Firebase is compliant with GDPR and provides appropriate safeguards for data transfers. Data is stored in secure, encrypted databases.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, your data will be permanently deleted within 30 days. QR codes and their associated analytics will be deleted along with your account.

8. Your Rights

Under GDPR, you have the following rights:

  • Right of access - Request a copy of your personal data
  • Right to rectification - Request correction of inaccurate data
  • Right to erasure - Request deletion of your data
  • Right to data portability - Request your data in a machine-readable format
  • Right to object - Object to processing of your data
  • Right to withdraw consent - Withdraw any previously given consent

To exercise any of these rights, please contact us at sven-eric@molzahn-software.de.

9. Cookies

We use essential cookies only:

  • Session cookie - To keep you logged in (expires when you log out or after inactivity)

We do not use advertising cookies or third-party tracking cookies.

10. Third-Party Services

We use the following third-party services:

  • Firebase Authentication - For user authentication
  • Firebase Firestore - For data storage
  • Vercel - For hosting

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.

Last updated: January 2026

12. Contact

If you have any questions about this privacy policy, please contact us at sven-eric@molzahn-software.de.