Privacy Policy

Effective Date: August 28, 2026

Governing Law: Personal Information Protection Act (PIPA), British Columbia, Canada

Last Updated: August 2026

1. Overview

This Privacy Policy outlines how qr-dnr.com ("we," "us," or "our") collects, uses, discloses, stores, and protects personal information submitted through our QR code generation service and user accounts. We operate in compliance with the British Columbia Personal Information Protection Act (PIPA) and applicable Canadian federal privacy standards.

2. Information We Collect

  • Form Submission Data: Personally Identifiable Information (PII) and emergency details—such as your name, medical/DNR preferences, primary contact details, and secondary emergency contact details—that you voluntarily input into the QR code generation forms.
  • Account Information: Email address, password hash, and profile settings created during account registration.
  • Online Profile Data: Expanded emergency contact details and profile preferences that registered users choose to store and display on their hosted emergency web page.
  • Technical Data: IP address, browser type, device information, and access logs recorded when interacting with our website, temporary file download links, or public Online Profile URLs.

3. How We Use & Publicly Disclose Personal Information

A. Offline Temporary QR Codes (Unregistered Users)

  • Direct Encoding: Information entered by unregistered users is encoded directly into a visual QR code image for offline scanning without internet access.
  • Temporary Public Access: Upon generation, your temporary QR code file is saved to a public server directory accessible via a unique URL containing a complex, randomized hash identifier. While unlisted and hard to guess, anyone in possession of this exact link can view or download the file.
  • Consent: By generating a QR code without creating an account, you explicitly consent under BC PIPA to this temporary public hosting for the purpose of downloading your file.

B. Public Online Profiles (Account Holders)

  • Purpose: To provide emergency responders with complete information (including secondary contacts and extended emergency details) when mobile or internet connectivity is available.
  • Secret Hash URLs & Public Accessibility: Registered users may choose to enable a hosted Online Profile. This creates a permanent web page accessible via a unique, hard-to-guess URL containing a secret hash (e.g., [qr-dnr.com/p/a8f9b2c7](https://qr-dnr.com/p/a8f9b2c7)...).
  • Public Nature of Profile Links: While secret hashes prevent search engine indexing and automated guessing, these web pages are public and do not require a login or password to view. Anyone who scans your printed QR code, follows the link, or obtains the secret hash URL will be able to view all personal and emergency information displayed on that page.
  • Consent under BC PIPA: By choosing to activate an Online Profile, you provide explicit consent to the public hosting and display of your submitted personal and emergency information via an unlisted URL.

4. Data Retention & Deletion Schedule

  • Unregistered Temporary Files: Temporary, publicly accessible QR code download files are automatically scheduled for permanent deletion 3 hours after creation. In the event of system outages, technical maintenance, or server failure, complete deletion may take up to 72 hours.
  • Account Transfer: If you create an account before the temporary file expires, the file is moved to your private account storage, and the temporary public download link is permanently deactivated.
  • Registered Online Profiles: Personal information and Online Profiles associated with an active account are retained for as long as your account remains open. You may update, disable, or delete your Online Profile or individual data fields at any time from your account dashboard.
  • Account Deletion: Closing your account permanently deletes all stored files, personal data, and public Online Profile URLs from our active databases.

5. Data Storage, Security & User Risk

  • Private Storage: Account-linked QR codes, stored profile parameters, and login details are housed within a private, authenticated server environment protected by physical, technical, and administrative safeguards.
  • Public URL Safeguards: Online Profile pages utilize high-entropy secret hashes to minimize unauthorized access. However, because these URLs are intentionally designed to be accessible without authentication during emergency situations, you acknowledge and assume the inherent privacy risks of publishing sensitive information to an unlisted public web page.

6. Your Rights Under BC PIPA

Under British Columbia's Personal Information Protection Act, you have the right to:

  • Access: Request access to the personal information we hold about you.
  • Correction: Request corrections to any inaccurate or incomplete personal data.
  • Withdraw Consent: Withdraw your consent to the processing or public hosting of your personal information at any time (e.g., by disabling your Online Profile or deleting your account). Withdrawing consent for an unregistered submission results in immediate file deletion.

To exercise any of these rights, or to submit a privacy inquiry or complaint, please contact our designated Privacy Officer:

Privacy Officer

qr-dnr.com

Victoria, British Columbia, Canada

Email: privacy@!zilch!qr-dnr.com

Keep us running with a donation

Our service is completely free and supported only by users like you, If you find our tool helpful, please consider a small donation. Every bit makes a difference!