What scan data is collected?

A managed scan records a visit when the service handles the asset's public redirect. Its record associates the visit with the asset and time, includes browser-related information, and uses a hashed visitor estimate for counting. This does not turn the hash into a person's identity.

A static QR code opens the information stored in its matrix directly. QRCodeTransfer cannot observe that direct opening, even when an image was designed here. Separate analytics on the destination website are controlled by that website, not by the QR download.

GPS coordinates require a valid location-consent session. A visitor may refuse permission and continue without sharing coordinates. Browser permission, HTTPS and actual device results determine whether usable location data is supplied; no guessed location should replace missing consent.

Before collecting responses or location for a campaign, tell visitors what you intend to collect and limit team access appropriately. Use your selected date range when reviewing records. For privacy or retention questions, contact us without sending raw credentials or unnecessary visitor information.