Privacy Policy

1. Introduction

I, Tobias Kokesch ("I", "me", or "my"), respect your privacy and am committed to protecting your personal data. This privacy policy explains how I collect, use, and safeguard your information when you use the QR code and barcode generation API service at qr-bar.codes.

2. Data Controller

The data controller responsible for your personal data is:

3. Data We Collect

When you use the API service, the following information may be collected:

• IP Address: Used for rate limiting (100 requests per hour) and abuse prevention
• Request Data: The data you submit to generate QR codes or barcodes (not stored permanently)
• Technical Data: Browser type, operating system, and access times for server logs
• Usage Data: API endpoints accessed and response times for service optimization

4. How Your Data Is Used

The collected data is used for the following purposes:

• To provide and maintain the API service
• To enforce rate limits and prevent abuse
• To monitor and analyze usage patterns for service improvement
• To detect, prevent, and address technical issues
• To comply with legal obligations

5. Data Retention

API Request Data: The content you submit for QR code or barcode generation is processed in real-time and is not stored on the servers after the response is sent.

Server Logs: Technical logs containing IP addresses and request metadata are retained for up to 30 days for security and debugging purposes, after which they are automatically deleted.

Rate Limiting Data: IP-based rate limiting information is stored temporarily and automatically expires after the rate limit window (1 hour).

6. Legal Basis for Processing (GDPR)

Your personal data is processed based on the following legal grounds:

• Contract Performance: Processing is necessary to provide the API service you requested
• Legitimate Interests: Processing for security, abuse prevention, and service improvement
• Legal Obligation: Processing required to comply with applicable laws

7. Data Sharing and Third Parties

Your personal data is not sold. Data may be shared with:

• Hosting Provider: The servers are hosted by Hetzner Online GmbH in Germany
• Legal Authorities: When required by law or to protect legal rights

8. Your Rights

Under GDPR and other applicable data protection laws, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of processing
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact me at hallo@binary-hype.com.

9. Cookies

The API service does not use cookies. The website may use essential cookies for basic functionality (such as CSRF protection). No tracking cookies or third-party analytics cookies are used.

10. Data Security

Appropriate technical and organizational security measures are implemented to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes:

• HTTPS encryption for all API communications
• Regular security updates and monitoring
• Access controls and authentication for server access
• Regular backups and disaster recovery procedures

11. International Data Transfers

The servers are located in Germany within the European Union. If you access this service from outside the EU, your data may be transferred to and processed in Germany. As this is within the EU, GDPR protections apply directly without requiring additional safeguards.

12. Children's Privacy

This service is not directed at children under the age of 16. Personal data from children is not knowingly collected. If you believe data has been collected from a child, please contact me immediately.

13. Changes to This Policy

This privacy policy may be updated from time to time. Any changes will be posted on this page with an updated "Last updated" date. Please review this policy periodically.

14. Contact

If you have any questions about this privacy policy or data practices, please contact me:

15. Supervisory Authority

If you believe that your concerns have not been adequately addressed, you have the right to lodge a complaint with your local data protection supervisory authority. In Germany, this is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA).