tinee.link

Privacy Policy

Last updated: October 1, 2026

1. What We Collect

Who	What	Why
Registered account holders	Name, email, company name (optional), profile picture (optional), password (stored hashed, never in plain text)	To operate your account, let you log in, and personalize your dashboard
Anyone who scans a QR code or clicks a short link	Timestamp, device type, referrer, and an approximate country/city derived from an anonymized IP address	To power the scan analytics shown to the link's owner
Anonymous QR code creators (where we offer creation without an account)	The IP address used to create the code	Solely to enforce the same Free-plan limits registered accounts have
Anyone who submits a Bug Report or Contact Support message	Your name and email (from your account), the message or description you write, the page you were on (bug reports), and a screenshot if you choose to attach one	To investigate and respond to your report or question

We anonymize visitor IP addresses at the moment we record a scan - the last portion of the address is masked before anything is written to our database, consistent with GDPR/PDPA practices. We never store a visitor's full IP address.

2. How Long We Keep It

Account data is kept for as long as your account is active, and erased on request (see "Your Right to Erasure" below).
Scan analytics are retained indefinitely in their already-anonymized form, regardless of plan. This data was never tied to a visitor's real identity to begin with. How far back you can view or export this history through your dashboard depends on your plan - see our Terms of Service for details.
Anonymous creator IPs are retained only for as long as needed to enforce the Free-plan limit, and only in connection with the QR codes created from that address.
Bug Reports and Support messages are retained so we have a record of what was reported and how it was resolved - the name/email shown on them is a snapshot taken when you submitted, not a live link to your account. If you later erase your account, these stay on file with that same snapshot for our own reference; the same detach-not-delete approach described in Option 1 under "Your Right to Erasure" below.

3. Your Rights

Depending on where you live, you may have rights under GDPR, PDPA, or similar laws to access, correct, restrict, or object to our processing of your personal data, to receive a copy of it in a portable format, to lodge a complaint with your local data protection authority, and to request erasure. To exercise any of these, use the relevant tool in your account's Settings page, or contact us at support@tinee.link if no self-serve option is available yet.

Your Right to Erasure - what actually happens

From Settings → Close Your tinee.link Account, you can permanently close your account, choosing one of two options. Both immediately and permanently remove your name, email address, company name, and profile picture from our systems, and your password is invalidated so the account can never be logged into again. Where they differ is what happens to the QR codes and short links you created:

Option 1 - Keep My Printed QR Codes Working (recommended). We do not delete the QR codes or short links you created, and we do not need to reassign them to a different account to do this - because the erasure only removes the personally identifying fields on your account record, the link between "this account" and "these QR codes" can stay in our database without it containing any personal data about you any more. Your codes keep redirecting exactly as before, per the "Forever Scannable" commitment in our Terms of Service, since deactivating them would break links you've already printed and given to other people. The scan analytics tied to those codes also remain, but as explained above they never contained a visitor's identity to begin with. You lose access to the analytics dashboards for those codes, since that requires an active account.

Option 2 - Delete Everything Permanently. Every QR code and short link you created, every link/parameter/scan record attached to them, and your account itself are all permanently and irreversibly deleted at the same time - there's nothing left afterward for a future request to resolve. Anyone who scans one of your printed QR codes after this sees a generic "no longer active" page rather than an error, but it will not redirect anywhere. This option is itself a complete erasure and needs no further request from you; choose it if you want nothing related to your account to remain in our systems at all.

4. Third Parties We Share Data With

Geolocation lookup - to resolve a scan's approximate country/city, the visitor's IP address is sent to a geolocation API at the moment of the scan. We discard the raw IP immediately afterward and store only the anonymized IP plus the resolved location.
Google Safe Browsing (only if we've enabled this check) - destination URLs you submit are checked against Google's threat list before we save your link, to protect the domain's reputation.

We do not sell personal data to anyone.

5. Security

Passwords are stored hashed, never in plain text. Traffic to tinee.link is served over HTTPS. No system is perfectly secure, but we take reasonable, industry-standard measures to protect your data.

6. Changes to This Policy

We may update this Privacy Policy as the service evolves. Material changes will be posted here with an updated date above, and registered account holders will be notified by email in advance of any change that reduces your rights under this policy.