Privacy Policy

Cradle Labs LLC is a limited liability company registered in Houston, Texas, USA. For any question about this Policy or how we handle your information, contact us at cradlelabs1@gmail.com.

Account information. When you create an account or sign in to a Service, we collect information from you directly or from the sign-in method you choose (for example, your name, email address, and profile picture when you sign in with Google, or your email address when you sign in with a password or a magic link).

Content you create. Our Services let you create and store content - for example, the QR codes you design, the information you encode into them (URLs, text, Wi-Fi credentials, contact details, uploaded files), and your styling preferences. We store this content so you can access, edit, and reuse it.

Usage and analytics data. Some Services offer optional link-tracking features. For example, our QR code generator lets you enable "Track scans" on a QR code, which routes the code through a short link we host. When someone scans a tracked code, we log: the date and time of the scan, a one-way cryptographic hash of the scanning device's IP address (we do not store the raw IP address), an approximate location derived from that IP address (country, region, and city - not precise geolocation), device type, browser and operating system (with version, where available), the referring page, and the browser's language and time zone, as reported by the visitor's browser. This feature is opt-in per QR code; codes without tracking enabled generate no scan data.

Cookies and local storage. We use browser local storage to keep you signed in between visits. We do not use third-party advertising cookies or tracking pixels.

We use the information described above to:

• Operate, maintain, and provide the features of our Services, including authenticating you and saving your content.
• Show you analytics about your own content (for example, scan counts and trends on your own QR codes).
• Respond to support requests you send to us.
• Maintain the security, integrity, and reliability of our Services, including detecting abuse.
• Improve our Services and develop new features.

We do not sell your personal information, and we do not share it with advertisers. We share information only with the service providers ("sub-processors") that host and run our Services on our behalf, each acting under its own data protection terms:

• Supabase - database, authentication, and file storage.
• Vercel - application hosting.
• Cloudflare - domain name services (DNS) and content delivery/network security.
• Google - optional "Sign in with Google" authentication, if you choose to use it.
• ip-api.com - best-effort IP-address geolocation lookups, used only to derive the approximate country/region/city for scan analytics described in Section 2; we do not store the IP address itself.

We may also disclose information if required by law, to protect the rights, property, or safety of Cradle Labs, our users, or the public, or in connection with a merger, acquisition, or sale of assets, subject to this Policy continuing to apply to your information.

We retain your account information and content for as long as your account or content exists. If you delete a piece of content (for example, a saved QR code), we delete it and its associated scan analytics along with it. If you delete your account, we delete your account data within a reasonable period, except where we are required to retain certain records by law.

You can access, update, or delete your content directly within a Service at any time. You can opt out of scan tracking on a given QR code simply by not enabling that feature. You can request access to, correction of, or deletion of your personal information, or ask us any question about how we process it, by emailing cradlelabs1@gmail.com. Depending on where you live, you may have additional rights under laws such as the EU/UK General Data Protection Regulation or the California Consumer Privacy Act; we will honor valid requests under applicable law.

Our Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at cradlelabs1@gmail.com and we will delete it.

Our Services are operated from the United States using infrastructure providers described in Section 4, and your information may be processed in the United States or other countries where those providers operate. By using our Services, you understand your information may be transferred to and processed in countries other than your own.

We use reasonable technical and organizational measures - including encryption in transit, access controls, and one-way hashing of sensitive identifiers such as IP addresses - to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We may update this Policy as we add features or launch new Services under the Cradle Labs umbrella. We will update the "Last updated" date above when we do, and material changes will be reflected on this page. Your continued use of a Service after an update means you accept the revised Policy.

Cradle Labs LLC - Houston, Texas, USA. Questions about this Policy? Email cradlelabs1@gmail.com.