Privacy

Lawless Solutions LLC operates QRLS. We store account names/email, organization memberships, optional holder names/references, credential status, usage counts and authorized scan activity. Avoid entering sensitive personal information.

Static generator content stays in your browser. Camera frames are decoded on your device and are not uploaded; the decoded token is sent over HTTPS for an authorized check.

Credential authentication tokens and API keys are hashed; encrypted credential copies support authorized reprinting. Passwords are hashed. Audit records identify the authorized account/key, action, outcome and time, not raw tokens.

Credentials remain until their organization is deleted. Expiration does not erase history. Hourly maintenance on the next application request removes audit records older than 90 days, request metadata older than 30 days, idempotency responses older than 24 hours, expired reset links and rate buckets. If the application receives no requests, cleanup waits until the next request. Owners can delete an organization; account deletion requests go to support@lawlesssolutions.us. Backup retention must be disclosed by the deployment operator before public launch.

Contact support@lawlesssolutions.us for access, correction or deletion requests. This notice describes this release; it does not promise certification or regulatory compliance.