Privacy

Controller

Controller: IV, Carrefour BM, Makepe, Douala, Cameroon.

Contact for your data: contact@immigration-voyages.com.

Legal basis: performance of the service you request (account, QR codes, files, statistics of your QR codes, security of the service and handling of reports); your consent for the optional e-mail in a report.

Without an account, nothing leaves

A fixed QR is created in your browser. What you type and your images do not leave your device: the creator and batch pages forbid the browser from sending anything.

Your browser only keeps your language, your theme, your brand kits and the site files used to work without a connection. All of that stays on your device.

There is no audience measurement and no advertising tracker.

With an account

The platform keeps, until you delete them or delete the account:

• your e-mail address and your account limits
• your QR codes: name, destination, links page, rules, end date, scan limit, time zone, fingerprint of the QR password, folder, chosen link name and its sharing preview (title, text, image)
• for a business card or a business page: the photo or logo, contact details, opening hours and links you add, visible to anyone who scans the QR
• your entry tickets: the event name, each guest's name, the ticket code and the time it was used at the entrance; the check link is kept only as a fingerprint
• your files: content, name, size and type
• your API keys: name, start of the key, fingerprint and dates, never the key itself

Your password is never kept as such. The database keeps only a PBKDF2 fingerprint, computed with a secret server key stored outside the database: the database alone does not reveal it. Someone who obtained both the database and that key could try passwords at high speed: choose a long one. If you switch on two-step verification, its key is kept encrypted.

A single technical cookie keeps your session. It lasts 30 days and is extended when you use the site. The page's code cannot read it, and the database keeps only a fingerprint of it. Signing out erases it.

An abandoned file upload is erased within 48 hours.

Scans of an editable QR

At each scan, robots excluded, the platform records the date and time, the country, the city and the device type (iPhone, Android, computer, other). Country and city come from the host, based on the visitor's IP address. That address is not recorded with the scan.

The visitor's language can be used to choose the destination. It is not kept.

These lines stay as long as the QR exists. The owner sees the statistics, the administrator sees the total per account.

IP addresses

The server reads the IP address to limit attempts: sign-in, reports, QR password, downloads, unknown keys. It is only written as a salted fingerprint, in counters that last from 1 minute to 24 hours and that a daily task erases.

Host logs: Cloudflare keeps its own technical request logs; their content and duration follow its privacy policy (cloudflare.com/privacypolicy).

Reports, invitations and log

A report keeps the QR code, the reason, your text and, if you give it, your e-mail. Only the administrator reads it. No automatic deletion is scheduled, and it stays after the QR is deleted.

An invitation keeps the e-mail of the invited person. It stays too, no automatic deletion is scheduled.

The administration log keeps the action, its date, its target and the e-mail of the person who acted. It cannot be changed and stays after an account is deleted.

Deletion and backups

Deleting your account immediately erases your profile, your QR codes, your scans, your files, your keys, your events and their tickets. The copy of each QR is replaced by a "deleted" mark.

An encrypted backup of the database is made every week, and the last 8 are kept. Your data can therefore stay there for up to 8 weeks after deletion. Password fingerprints, sessions, two-step verification keys and file contents are not in it.

Providers and countries

• Cloudflare: the whole service. Database and accounts, uploaded files and backups (R2 storage): eastern North America (Cloudflare, Inc., United States; location requested from Cloudflare, which does not guarantee it). Pages, server, redirection of editable QR codes and its QR copies: United States (Cloudflare, Inc.), served from the point of its network closest to the visitor.
• Google Web Risk, if switched on: the address of each link is sent to it for checking. Status: not yet enabled.

The code passes data to no other provider. The platform sends no e-mail as long as no sending service is chosen. A forgotten password link is created by the administrator, at your request, and passed on to you by them.

Your rights

From your account, you can edit your QR codes, export your data to a file, without the content of your files, and delete the account. For any other request: contact@immigration-voyages.com.