Privacy policy

Last updated October 2026

Short version: we store what we need to run your codes and nothing else. We do not sell data, and we do not track the people who scan your codes across the web.

People who scan a code

When someone scans a dynamic ScanStill code, we record one scan with:

• The time of the scan
• Approximate country, region and city, derived from the network by our hosting provider
• Device type (mobile, tablet or desktop) and operating system family
• The referring page, if the browser sends one

We do not store IP addresses with scans, we set no cookies on people who scan, and we do not build profiles of them. Static codes never touch our servers at all.

Account holders

• Your email address, plan, and your codes with their names and destinations.
• One login cookie, so you stay signed in for 30 days, plus a small cookie that tells our menu to show Dashboard instead of Log in. No advertising cookies.
• Payment details are handled by Stripe. We never see or store your card number.
• We use privacy-friendly, cookieless page analytics to count visits to our own website.

Who we share data with

Only the providers that run the service: Vercel (hosting), Cloudflare (database), Stripe (payments) and Resend (email). Each processes data only to provide its service to us.

Your choices

You can export or delete your codes at any time from your dashboard. To delete your account and all its data, email support@scanstill.com from your account email and we will do it within 7 days.

Contact

Privacy questions: support@scanstill.com.