Privacy policy

We built Swoo.se to collect as little as possible. This page explains exactly what we store, why, and how to get it deleted.

If you have an account

• Account details: your name, email address, preferred language and a securely hashed password (or the identity provider you signed in with).
• Your content: the QR codes you create, their destinations and designs, and files you upload such as logos and PDFs.
• Security records: sign-in sessions and a log of important changes (for example, when a destination was changed and by whom).

When someone scans a dynamic QR code

We record that a scan happened and a few coarse facts so you can see whether your code is working:

• the time of the scan;
• the type of device, operating system and browser (for example “mobile · iOS · Safari”);
• the country and city, looked up from the IP address on our own server using an offline database (the IP address itself is then discarded);
• a one-day anonymous identifier, used only to estimate unique scans per day.

We do not store IP addresses or full browser fingerprints. The anonymous identifier is created with a secret that includes the date, so the same phone cannot be linked from one day to the next. We don't use scan data for advertising and don't sell it.

Static QR codes contain their content directly. Scanning them never contacts us, so we know nothing about those scans.

Designing without an account

Designs made before signing up are created in your browser. Logos you add there stay in your browser. To check that a design scans, we briefly process it on our server and then discard it.

When you click “Create QR code” before having an account, we store that design for up to 7 days so it's waiting for you after you sign up. Unclaimed designs are deleted automatically.

When you visit our website

We count visits to swoo.se ourselves, without cookies and without third-party analytics. For each page view we record the page address, the website you came from (only its domain), campaign tags in the link (utm_…), your country and city, device type, operating system and browser, and the same kind of one-day anonymous identifier as for scans. We don't store your IP address, and we can't recognise you from one day to the next.

Messages you send us

If you use the contact form, send feedback in the app or write a review, we keep what you write, your name and email (or your account) so we can answer and improve Swoo.se. Reviews are shown on our website only after we approve them, and only with the name you choose.

Cookies

We use only the cookies needed to keep you signed in and to keep a design waiting for you while you sign up. No advertising or third-party tracking cookies.

Service providers

We use a small number of providers to run the service: cloud hosting and database, file storage, an email delivery service for account emails, and Stripe for payments (we never see or store your card number). They process data only on our behalf.

Location data uses the IP to City Lite database by DB-IP, licensed under CC BY 4.0.

Your rights

You can access, correct, export or delete your data at any time. Deleting your account removes your QR codes, files and scan records. To make a request, email support@swoo.se.