Privacy Policy
Last updated: March 2026
ZapCode is built on a simple principle — we collect only what is necessary to run the service, we protect it properly, and we never sell it. This policy explains exactly what we collect and why.
Information We Collect
For free users who do not create an account, we collect no personal information. Google Analytics collects anonymised usage data such as page views, session duration, device type, and approximate geographic location — this data is aggregated and cannot identify individual users. For registered users, we collect your email address, name, and encrypted password. For Pro subscribers, our payment processor handles billing information — ZapCode never stores credit card numbers.
How We Use Your Information
We use your email address to send account-related communications including email confirmation, password reset, and subscription status updates. We use analytics data to understand how people use ZapCode and to improve the platform. We do not use your data for advertising targeting, profiling, or any purpose beyond operating the service.
Data Storage and Security
User data is stored in Supabase, a PostgreSQL database with row-level security enabled. This means each user's data is isolated and inaccessible to other users at the database level. All data is transmitted over HTTPS. Passwords are hashed and salted using industry-standard methods — they are never stored in plain text and cannot be read by ZapCode staff.
Your Generated Content
Barcodes and QR codes generated by free users are processed entirely in your browser — no data is sent to our servers. For Pro users who choose to save their history, generated content is stored in your private account and is only accessible to you. You can delete any saved item at any time from your dashboard.
Third-Party Services
ZapCode uses Google Analytics for usage analytics, Supabase for database and authentication services, and Paddle or Stripe as our payment processor for Pro subscriptions. Each of these services has its own privacy policy. We do not sell, rent, or share your personal data with any third party for commercial purposes.
Cookies
ZapCode uses cookies solely for authentication — to keep you logged in — and for Google Analytics anonymous usage tracking. We do not use advertising cookies or tracking pixels. You can disable cookies in your browser settings, though this will prevent you from staying logged in to your account.
Your Rights
You have the right to access, correct, or delete your personal data at any time. You can delete your account and all associated data by contacting us at hello@zapcode.click. We will process deletion requests within 30 days. If you are located in the EU, you have additional rights under GDPR including the right to data portability and the right to object to processing.