For schools and boards
Student privacy, in plain language.
Everything a principal, IT lead or privacy officer will ask before approving QR Polls for a classroom: what we collect from students (almost nothing), where it lives, who touches it, and how to delete it. Print this page or send the link.
What we collect from students
| Data | Collected? | Why |
|---|---|---|
| Name, email, phone, student number | Never | Students do not have accounts and are never asked. |
| Their answer to a poll or quiz | Yes | That is the point of the tool. Stored against the poll, not against a person. |
| Quiz nickname | Only if they type one | Shown on the leaderboard. Tell students to use a first name or a nickname. |
| A random device ID (cookie) | Yes | Stops one phone voting twice. Contains nothing about the student. |
| IP address | Never stored raw | Only a one-way salted hash, used to stop scripted ballot stuffing. |
| Location, contacts, camera images | Never | The phone camera only reads the QR code; that happens on the phone. |
| Advertising or tracking cookies | Not on student pages | Voting pages carry no ads and no analytics before consent. |
Who processes it, and where
| Provider | Role | Location |
|---|---|---|
| Vercel | Hosts the website | Global edge, US origin |
| Managed Postgres (Supabase) | Stores polls and answers; teacher sign-in | AWS us-east-1 (United States) |
| Resend | Sends teacher sign-in and receipt emails | United States |
| Stripe | Teacher payments only | United States / EU |
| PostHog, Google Analytics | Site analytics, only after the visitor consents | United States |
Full technical detail is on the security page and the privacy policy.
Questions boards ask
Do students need accounts?
No. Students scan a QR code and answer in the browser. Only the teacher can have an account, and even that is optional.
Where is the data stored?
In one region in the United States (AWS us-east-1). QR Polls is built in Canada, but we do not offer Canadian or EU data residency today. If your board requires in-country storage, QR Polls is not the right fit yet.
How do I delete student answers?
Delete the poll from your dashboard. That removes the poll and every answer to it from the database; it is not a soft delete. For an account deletion, email [email protected] and it is done within 30 days.
Is it FERPA / PIPEDA / MFIPPA compliant?
We do not hold a certification. What we can say: no student personal information is collected by design, answers are anonymous, and nothing on a student page is used for advertising. Share this page with your privacy officer; we answer their questions directly at [email protected].
Can I get a signed data processing agreement?
Not yet. Email [email protected] if your board needs one, so we know how many schools are asking.