Privacy Policy — QR Polls

1. Introduction

QR Polls (“we,” “our,” or “us”) operates the qrpolls.com website. This Privacy Policy explains how we collect, use, and protect your personal information when you use our services. We are committed to protecting your privacy in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy legislation.

2. Information We Collect

We may collect the following types of information:

Account information (optional): your email address, and a name if you give one, when you create an account or ask us to email you a link to keep a poll. You can make and run polls without an account.
Poll content and responses: the questions you write and the answers people give. Voters are never asked for a name or email. A vote is linked to an account only on polls set to “one vote per account”.
Network address: we never store a raw IP address. We keep a salted one-way hash, used only to stop ballot stuffing and abuse.
Visit counts: before you accept analytics, we count page views without cookies or storage, using an anonymous identifier derived from a hash that changes every day. The IP address is not passed on.
Analytics (only with your consent): if you accept analytics cookies, Google Analytics and PostHog record how the site is used.

3. How We Use Your Information

To provide and maintain our services
To personalize your experience
To communicate with you about your account or our services
To analyze usage patterns and improve our platform
To ensure security and prevent fraud
To comply with legal obligations

4. Data Sharing

We do not sell your personal information. We may share data with:

Service Providers: Third-party services that help us operate (hosting, analytics, payment processing).
Legal Requirements: When required by law, court order, or government regulation.
Business Transfers: In connection with a merger, acquisition, or sale of assets.

5. Data Security

We implement industry-standard security measures including encryption in transit (TLS 1.3), encrypted storage, access controls, and regular security audits. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Cookies

Essential cookies, always on: qp_voter (a random ID so each phone votes once), qp_owner (lets the browser that made a poll manage it without an account), your sign-in session if you have an account, and your cookie choice. Optional analytics cookies (Google Analytics, PostHog) are set only after you accept them in the cookie banner, and you can change your mind at any time. Pages where people vote carry no analytics and no ads.

7. Your Rights

Under Canadian privacy law, you have the right to:

Access your personal information
Request correction of inaccurate data
Withdraw consent for data processing
Request deletion of your data
Receive your data in a portable format

8. Data Retention

We retain your personal information only as long as necessary to provide our services and fulfill the purposes described in this policy. Account data is deleted within 30 days of account closure. Anonymized analytics data may be retained indefinitely.

9. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

10. Contact Us

For privacy inquiries, please contact our Privacy Officer at [email protected]