This policy explains how QR Manager ("the app"), published by AMProd, processes data when you use it with your Webflow site. AMProd is a sole proprietorship based in France and the data controller. We collect only what the app needs to work.
Data we store
| Data | Purpose | Retention |
|---|---|---|
| Webflow access token for your site (encrypted) | Read and write your "QR Codes" CMS collection on your behalf | Until you uninstall the app (or Webflow revokes the access) |
| IDs of the sites you authorized | Link the authorization to your sites | Same as above |
| QR Manager account: email address (your Webflow account's, or the one you typed to get a sign-in link), creation date, last sign-in, linked sites | Identify you, apply your subscription to all your sites, give you access to the customer area | Until you delete the account (from the customer area) |
| Customer area sessions (token hash only) and email sign-in links | Keep you signed in securely | Session: 30 days; link: 15 minutes, single use |
| QR style library: templates (names, colors, shapes), logos you upload, and the styles of QR codes customized one by one | Share the same QR styles with your team and redraw any code later | Same as above. Logos no longer used by any style are deleted automatically |
| Premium subscription: Stripe customer and subscription IDs, status, renewal date | Turn Premium on for the right account and keep it up to date | As long as the subscription exists, then as long as accounting rules require |
| Times of QR codes created on the free plan | Apply the free plan limit | 24 hours |
| Scan statistics: number of scans per QR code, day, country and device type (no data about the visitor) | Show you how your QR codes are used | 13 months, deleted when the site is disconnected or the code deleted |
| Technical cache (collection ID, site short name, site languages) | Avoid repeated API calls | Up to 10 minutes (collection: 1 hour), deleted on disconnect |
Visitors who scan a QR code
When someone scans a QR code, your site's redirect page sends QR Manager the site and the code that were scanned. We derive the country (provided by the Cloudflare network) and the device type (from the browser), then add 1 to the day's total. The IP address is only used in memory, for a minute at most, to filter duplicates and abuse; it is never recorded. No cookie is set and nothing is read from or stored on the visitor's device, so no consent is needed. For these statistics, QR Manager acts as a processor for the site owner, who can turn them off (Settings → Count scans).
Data we do not store
- Your QR codes and their content: they are stored in your own Webflow CMS, not on our servers. They only pass through our servers on their way to Webflow.
- Your CSV files: they are read in your browser; only the codes to create or update are sent to Webflow, one by one.
- Your name and email: Webflow tells the app who is using it in the Designer, to check access. We do not store them. Only your first name and last initial are written in the alt text of the QR image you generate, in your own CMS, so your team knows who made it.
- Visitors who scan your QR codes: scans are handled by your Webflow site; the app never sees them. The redirect script reads the visitor's browser language only to choose the page language, in the browser, without sending it anywhere.
- Contact form messages: your name, email, topic and message are emailed to us (through our email provider, Resend) so we can reply, and are not stored on our servers. We keep the conversation in our mailbox as long as needed to follow up on your request.
- Your payment details: they are entered on and processed by Stripe; we never see your card number.
- We use no analytics, advertising or tracking cookies.
- Host security cookie: Cloudflare, which hosts the site through Webflow Cloud, sets a technical cookie
__cf_bm(30 minutes) to block malicious bots. It is required to run the service, is not used for tracking, and therefore needs no consent. - Customer area session cookie: when you sign in to your account, the
qrm_sessioncookie (30 days, not readable by scripts, limited to this site) keeps you signed in. It is strictly necessary for the service you asked for and therefore needs no consent. It is deleted when you sign out. - Image cache: the site keeps its public images (screenshots, logo) in your browser, through a "service worker", so they show instantly on later visits. It holds no personal data or identifier and is not used for tracking. You can empty it by clearing the site's data in your browser.
Stored in your browser
The app keeps a few preferences in your browser's local storage, never sent to us: interface language, the domain chosen for each site, the setup assistant progress, default UTM values and, when the app runs without a Webflow connection, your QR codes and templates.
Security
- Access tokens are encrypted at rest (AES-GCM) and only ever used on the server.
- They are never sent to your browser, written to logs or shared with third parties.
- All connections use HTTPS.
Data controller and legal bases
The data controller is AMProd (sole proprietorship, France), see the legal notice.
| Processing | Legal basis (GDPR, art. 6) |
|---|---|
| Account, site connection, QR code management, templates | Performance of the contract (providing the service you asked for) |
| Subscription, payment, invoicing | Performance of the contract; legal obligation (accounting records) |
| Abuse limits, security, technical logs | Legitimate interest (protecting the service and its users) |
| Replying to contact messages | Legitimate interest (answering your request) |
Abuse protection
To block attacks and abuse, the IP address of each request is used to count calls. It is kept in memory for a few minutes at most and, for a few sensitive actions (contact form, admin page, sign-in link requests, for which the email address is counted too), in a counter that deletes itself after one hour at most. It is never used for anything else.
Processors and transfers
| Provider | Role | Country |
|---|---|---|
| Webflow, Inc. | App hosting (Webflow Cloud) and your site's API | United States |
| Cloudflare, Inc. | Network infrastructure and security (through Webflow Cloud) | United States, global network |
| Stripe | Subscription payment and invoicing | European Union (Ireland), United States |
| Resend | Sending contact form messages and sign-in links | United States |
Transfers outside the European Union rely on the EU-US Data Privacy Framework for certified companies, or on the European Commission's standard contractual clauses. These providers process data only to run the service.
Deleting your data
- In the app: Settings → Connection → Disconnect the site removes the site from your account and deletes its data listed above (settings, templates, statistics). The Webflow authorization stays active while the app is installed, so the site can be reconnected.
- In the customer area: Export my data downloads everything we keep about your account; Delete my account erases the account, its sessions and its links to your sites.
- Uninstalling the app from Webflow revokes access; the token and all stored data are then deleted.
- Premium subscription data is kept as long as the subscription exists: cancel it from the customer area or Settings → Subscription → Manage subscription.
- You can also ask us to delete your data (see contact below).
Your rights
You can access, correct or erase your data, restrict or object to its processing, and ask for its portability. Write to us (see below): we reply within one month. You can also lodge a complaint with the French data protection authority, the CNIL (cnil.fr), or the authority of your country.
Changes
We may update this policy. The date at the top shows the latest version.
Contact
AMProd (sole proprietorship), amprod.pro. Write to us through the contact form or at contact@amprod.pro.