Security & privacy
Built with security and your privacy in mind.
Lynkarr is designed to help you create, manage and track QR codes and short links, with the detail on security, data protection and privacy that your checks will ask for.
- Secure by design
- Your data, your control
- Transparent practices
How your data stays secure.
Layers of protection keep your information safe from creation to analytics.
- CreateYour QR codes and links are created over encrypted, signed-in connections.
- StoreData is encrypted at rest on Cloudflare's infrastructure.
- AccessRole-based permissions control who can view or manage your data.
- AnalyzeOnly people on your team with access can see analytics and reports, and every change carries a name.
What we protect.
Here’s a look at the types of information we help keep secure.
- Account informationName, email and profile details.
- QR codes and short linksYour codes, destination URLs, settings and custom domains.
- Analytics dataScan data, device and location insights. Nothing in it names a person.
- Team and access settingsUser roles, permissions and workspace data.
- Payment informationHandled by Stripe on its own pages, so no card number reaches us.
Your privacy matters.
We’re committed to being transparent about what we collect, how it’s used, and the choices you have.
- We do not sell your personal information
- A scan records only what the reports need
- Deleting a company deletes its data, files in storage included
- Scan analytics identify nobody: no cookie, no stored IP address
- Individual scan events are kept for 400 days, then removed
Additional security features.
Tools and options to help you keep your account and data even safer.
Single sign-on over OpenID Connect is on Enterprise.
Frequently asked questions.
Is my data encrypted?
Yes, in transit and at rest. Passwords are stretched in the browser and hashed again on the server, and sessions and API tokens are stored as hashes: a token is shown once when it is made and cannot be read back.
Do you sell my personal information?
No. Nothing is sold, and a scan sets nothing on a device that another website could read.
Where is my data stored?
With Cloudflare, which runs all of it. Stripe handles payments, Resend delivers our email and Turnstile checks that a sign-up is a person. The sub-processors are listed here.
Can I delete my data?
Yes. Delete any code, link or contact at any time, and deleting a company deletes its data rather than hiding it, files in storage included.
Do you support SSO?
Yes, on Enterprise, over OpenID Connect with any provider that speaks it. It can be required so passwords stop, with owners exempt so a broken provider is still recoverable. Setting up single sign-on.
Are you SOC 2 or ISO 27001 certified?
No, and we will not imply otherwise. Those audit a company rather than a product. What we can give you is the detail on this page, all of it checkable, and a direct answer to anything it does not cover.
Start creating with confidence.
Free to start, with two-factor sign-in on every plan. Anything this page misses gets a direct answer: ask us.