This Privacy Notice explains what data DynamiHost collects, how we use it, and the choices you have. We collect the minimum data needed to operate the service and never sell personal data.
1. Data we collect
- Account data: your name, email address, and a securely hashed password. Team invitations store the invitee's email.
- QR code data: code names, destination URLs, styling choices, uploaded files and logos, and configuration such as schedules and routing rules.
- Scan analytics: when one of your QR codes is scanned we log the time of the scan along with coarse technical details (device type, operating system, browser, and country and city derived from IP). We do not build profiles of scanners and do not use this data for advertising. You can enable IP anonymization in Settings, Privacy and data, which drops the last octet of IPv4 addresses (and the last 64 bits of IPv6 addresses) before scans are stored.
- Billing data: payments are processed by Paddle, our merchant of record. Paddle handles your payment details; we receive subscription status and invoices, not card numbers.
- Support data: messages and file attachments you send through support tickets in the dashboard, or by email when asking for help. Ticket attachments are stored in our object storage and are accessible only to you and our support staff, through authenticated downloads.
2. How we use it
- Provide and operate the service (hosting codes, redirects, analytics dashboards).
- Enforce plan limits and prevent abuse or fraud.
- Send service notifications you opted into (e.g. plan limit warnings).
- Improve reliability and troubleshoot issues.
3. Cookies
We use strictly necessary cookies to keep you signed in (session cookies). We do not use advertising or cross-site tracking cookies.
4. Data sharing and sub-processors
- Hetzner: server hosting and S3-compatible object storage for hosted files, logos, support attachments and backups, located in the EU (Germany) (hetzner.com/legal/privacy-policy).
- Paddle processes payments as our merchant of record (see Paddle’s privacy policy). Paddle handles your payment details; we receive subscription status and invoices, not card numbers.
- Our own mail server delivers transactional emails such as sign-up confirmations and password resets. It is self-hosted, so your email address is not shared with a third-party email provider.
- Cloudflare provides content delivery, DDoS protection and edge security in front of our servers, and Turnstile, its bot check on our sign-up and invite forms, which processes visitor IP addresses and browser signals to tell humans from bots (see Cloudflare’s privacy policy).
- We do not sell personal data and do not share it with advertisers.
- We may disclose data where required by law or to protect the security of the service.
5. Data retention and deletion
We keep your data while your account is active. Deleting your account removes your QR codes, uploaded files, scan data, team information, and support tickets including their attachments. Closed support tickets are also automatically deleted, together with their attachments, once the retention period configured for their category has passed. Backups may retain copies for a limited time. Aggregated, anonymized statistics may be kept indefinitely.
6. Security
We apply industry-standard measures including encrypted connections (HTTPS), hashed passwords, and separated database credentials for client and staff data. No method is perfectly secure, and we encourage strong, unique passwords.
7. Your rights
Depending on your jurisdiction (including under the GDPR and similar laws), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise these directly in your dashboard under Settings, Privacy and data: download a full copy of your workspace data, or permanently delete your workspace. For anything else, contact us at the address below and we will respond within a reasonable time.
8. Changes to this Notice
We may update this Notice as the service evolves. Material changes will be announced via the dashboard or email.
9. Contact
Privacy questions or requests: [email protected]