Privacy Policy

Last updated: October 1, 2026

1. Who we are

Reprintless (legal business name: Reprintless) is the data controller for personal data processed through the Reprintless service. This means we decide why and how your personal data is used. Reprintless is operated as a sole proprietorship by Alexandre Pesant. You can contact us through the contact details provided in the app.

2. Data we collect and why

• Account data (email address, login credentials, or Google sign-in profile): to create and secure your account — contract performance.
• QR code content (titles, destination links, design settings): to provide the service — contract performance.
• Scan data (time of scan, device type, approximate country, browser user agent, and a one-way hashed IP address): to show scan analytics and prevent abuse — legitimate interests.
• Usage and technical data (IP address, device identifiers, logs): for security, fraud prevention and improving the product — legitimate interests.
• Support messages: to answer your questions — legitimate interests / contract performance.

Payment details are collected directly by Paddle, not by us.

3. Who we share data with

• Service providers that host and run the service (cloud hosting, database, authentication).
• Paddle, our Merchant of Record, for the sale of our product, subscription management, payments, tax compliance and invoicing.
• Professional advisers such as lawyers and accountants.
• Authorities, where required by law.

We do not sell your personal data.

4. International transfers

Our providers may process data outside your country, including outside the UK/EEA. Where this happens we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

5. Retention

We keep account data and QR codes while your account is active. Scan records are kept for as long as needed to provide analytics. When data is no longer needed, or after you delete your account, we delete or anonymise it, except where we must keep it to meet legal obligations.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing of your data, to data portability, and to withdraw consent at any time. You can also complain to your local data protection authority. We respond to requests within one month.

7. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and hashing of IP addresses in scan records.

8. Cookies and advertising measurement

We use essential cookies and local storage to keep you signed in and run the service.

We also use Google Ads conversion measurement to understand how our advertising performs. This may set advertising cookies and share pseudonymous data (such as ad click identifiers and conversion events) with Google for measurement and ad optimization. Visitors in the EEA, UK, Switzerland and Quebec are asked for consent first through our cookie banner, and you can change or withdraw your choice at any time. Learn how Google handles this data at Google's Business Data Responsibility site.

9. Contact

To exercise your rights or ask a question, contact Reprintless through the contact details provided in the app.