Privacy Policy

Last updated: April 5, 2026

1. Introduction

Welcome to Emerald QR Studio ("we", "our", "us"), operated by HFK Corporation. This Privacy Policy explains how we collect, use, and protect your personal information when you use our QR code generator service at emeraldqr.pages.dev.

2. Information We Collect

Account Information

When you create an account, we collect:

  • Your name
  • Email address
  • Password (stored securely using PBKDF2 hashing with random salt)

QR Code Data

We do NOT collect or store the content of your QR codes. All QR code generation happens entirely in your browser (client-side). The data you enter (URLs, WiFi passwords, phone numbers, etc.) never leaves your device.

Usage Data

We may collect anonymous usage statistics such as page views and feature usage to improve our service. This data cannot be used to identify individual users.

3. How We Use Your Information

We use your information to:

  • Provide and maintain your account
  • Process plan upgrades and manage subscriptions
  • Send important service-related communications
  • Improve our service quality and user experience
  • Respond to your support inquiries

We never sell, rent, or share your personal information with third parties for marketing purposes.

4. Data Security

We take security seriously:

  • Passwords are hashed using PBKDF2 with 100,000 iterations and random salt
  • Sessions are managed via secure, HttpOnly cookies
  • All communications are encrypted via HTTPS
  • QR code data is processed locally in your browser — it never reaches our servers
  • Our infrastructure is hosted on Cloudflare's global network with enterprise-grade security

5. Cookies

We use essential cookies only:

  • Session cookie (eqs_session): Keeps you logged in. Expires after 30 days. HttpOnly and secure.
  • Theme preference: Stores your light/dark mode choice in localStorage (not a cookie).

We do not use third-party tracking cookies, advertising cookies, or analytics cookies that track individual users.

6. Third-Party Services

We use the following third-party services:

  • Cloudflare: Hosting, CDN, and security (Workers, Pages, D1 database)
  • Google Fonts: Typography (Inter font family)

Each third-party service has its own privacy policy governing data they may collect.

7. Your Rights

You have the right to:

  • Access your personal data stored in your account
  • Update your account information at any time
  • Delete your account and all associated data by contacting us
  • Export your account data upon request
  • Withdraw consent for data processing at any time

8. Data Retention

We retain your account data for as long as your account is active. If you request account deletion, we will remove all your personal data within 30 days. Anonymous usage statistics may be retained indefinitely.

9. Children's Privacy

Our service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us for removal.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email. The "Last updated" date at the top reflects the most recent revision.

11. Contact Us

If you have any questions about this Privacy Policy or your data, please contact us: