This Privacy Policy describes how Masterbyte Network Solutions (operating as MASTERBYTE, "we", "us", or "our") collects, uses, and protects information in connection with QR Server ("the Service"), accessible at scan.mb-networks.ca. We are based in Ontario, Canada and operate in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy law.

1. Information We Collect

Account holders (registered users):

• Email address and display name provided at registration
• Bcrypt-hashed password (we never store plaintext passwords)
• Account tier (Free, Plus, or Pro)
• Login timestamps and session data

QR code scan data (collected when someone scans a registered user's QR code):

• Timestamp of scan
• IP address of the scanner's device
• Browser user agent string
• GPS coordinates (only if the scanner grants location permission in their browser)
• Approximate city, region, and country (resolved from GPS or IP geolocation)

Note on Free tier: For QR codes owned by Free tier accounts, only a scan count and timestamp are stored. No IP address, location, or device data is retained for Free tier scans.

2. How We Use Information

• To operate and maintain the Service
• To provide scan analytics to the QR code owner (registered account holder)
• To send transactional emails (account verification, password reset)
• To enforce usage quotas and tier limits
• To improve the Service

We do not use personal information for advertising and we do not sell or share personal information with third parties, except as described in Section 3.

3. Third-Party Services

The Service uses the following third-party services which may receive limited data:

• Google Maps Geocoding API — GPS coordinates from Plus/Pro tier scans are sent to Google to resolve a human-readable location. Google's privacy policy applies: policies.google.com/privacy
• ip-api.com — IP addresses from Plus/Pro tier scans are sent to ip-api.com for geolocation fallback when GPS is unavailable. Their privacy policy applies: ip-api.com/docs/legal
• Cloudflare — DNS resolution for scan.mb-networks.ca is handled by Cloudflare. Cloudflare's privacy policy applies: cloudflare.com/privacypolicy

4. Data Retention

• Account data is retained for as long as the account is active
• Unverified accounts are automatically deleted after 7 days if email verification is not completed
• Scan data is retained for as long as the associated QR code exists
• Deleting a QR code permanently deletes all associated scan records
• Deleting an account permanently deletes all associated codes and scan records
• Daily SQLite database backups are retained for 30 days

5. Data Security

We take reasonable measures to protect your information including encrypted HTTPS connections, bcrypt password hashing, session-based authentication with HttpOnly cookies, firewall restrictions, and automated security updates. No method of transmission over the internet is 100% secure and we cannot guarantee absolute security.

6. Your Rights (PIPEDA)

Under PIPEDA, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Withdraw consent and request deletion of your account and data
• File a complaint with the Office of the Privacy Commissioner of Canada

To exercise these rights, contact us at info@mb-networks.ca.

7. Cookies

The Service uses a single session cookie to maintain your login state. This cookie is HttpOnly, not accessible to JavaScript, and expires after 7 days. We do not use advertising cookies or third-party tracking cookies.

8. Children

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions or requests, contact Masterbyte Network Solutions at info@mb-networks.ca.