← bmac.io

Privacy Policy

Last updated: July 7, 2026

This Privacy Policy explains how bmac.io (“we”, “us”) handles information across bmac.io and the personal portfolio projects it links to, including Dynamic QR. It does not cover client or commercial sites we build for others; those carry their own separate policies.

Information we collect

Depending on which project you use, we may collect:

  • Contact details you give us. If you use a contact form, we receive your name, email address, and message.
  • Account information. On projects with accounts (such as Dynamic QR), we store your email address, a securely hashed password, and an optional display name.
  • Content you create. For example, the destination URLs and titles you save for a QR code.
  • Usage and analytics data. Some projects record aggregate activity. For Dynamic QR, each scan of a code logs a timestamp, an approximate country derived from the network address, a device category (mobile, tablet, or desktop), and the referring website’s domain. We store a salted, one-way hash of the IP address for abuse prevention; we do not store the raw IP address.

How we use information

  • To operate and provide the features of each project.
  • To respond to messages you send us.
  • To secure the service and prevent abuse.
  • To understand aggregate usage and improve the projects.

We do not sell your personal information, and we do not use it for third-party advertising.

Cookies

We use only a strictly necessary session cookie to keep you signed in on projects with accounts. We do not use advertising or third-party tracking cookies. Scan analytics are collected server-side without cookies, so no cookie-consent banner is required.

Service providers

We rely on a small set of infrastructure providers who process data on our behalf:

  • Netlify and Vercel — website hosting.
  • Neon — database hosting (United States).
  • Resend — sending transactional and contact emails.

These providers may change over time. Each processes only the data needed to perform its function.

Data retention

We keep account and content data for as long as your account is active. You can delete your account at any time, which removes your account data and the codes and scan history associated with it. Contact-form messages are kept only as long as needed to respond.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to certain processing. To exercise any of these, email ben@bmac.io. On projects with accounts you can also delete your account directly from your settings.

Children

These projects are not directed at children under 13, and we do not knowingly collect information from them.

Changes

We may update this policy as the projects evolve. Material changes will be reflected in the “last updated” date above.

Contact

Questions about this policy? Email ben@bmac.io.