Regulatory & Standards Commitment
StealthQR is designed from the ground up with data protection, ethical software practices, and regulatory transparency at its core. We actively benchmark our operational architecture against leading global privacy standards and security frameworks.
- General Data Protection Regulation (GDPR) in the European Union
- California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)
- ISO/IEC 18004 standards for two-dimensional QR code generation and readability
- Privacy-by-Design architecture with zero persistent payload retention
Privacy-by-Design & Cloud Asset Security
We balance instant QR code generation with strict technical safeguards for user-uploaded files and payload data.
- Standard text and static URL generation runs entirely client-side without touching external databases.
- User-uploaded files (PDFs, media, documents) are protected using AES-256 encryption at rest and TLS 1.3 encryption in transit.
- Uploaded files, scan telemetry, and destination URLs are never mined for advertising, behavioral profiling, or third-party resale.
- Dynamic link assets and uploaded files remain active only as long as required by the account holder, with immediate hard-deletion capabilities and configurable Time-To-Live (TTL) expiration schedules.
GDPR & CCPA Rights Alignment
We honor core data subject and consumer rights across global jurisdictions. Whether you are an individual generating codes or an end-user scanning a StealthQR destination:
- Right to Know and Access: Clear transparency over what minimal metadata (if any) is processed
- Right to Deletion: Immediate deletion capabilities for any registered account or dynamic link history
- No Sale of Personal Data: We never sell, rent, or trade your personal information or scan telemetry
- Granular Cookie Control: Explicit user consent management for essential vs analytics cookies
Content Safety & Abuse Prevention
Trust and ecosystem safety are paramount. We deploy rigorous measures to prevent misuse of QR technology, phishing attacks, malware distribution, and deceptive URL redirects:
- Zero tolerance for malicious domains, phishing redirects, or credential harvesting schemes
- Proactive threat intelligence screening against verified malware and deception blacklists
- Immediate takedown and permanent revocation of flagged or abusive dynamic redirect codes
- Rate limiting and automated abuse detection to thwart automated denial-of-service attempts
Security & Infrastructure Safeguards
Our platform infrastructure is hosted in tier-1 certified data centers adhering to SOC 2 Type II and ISO 27001 standards. We enforce least-privilege administrative access, continuous automated vulnerability scanning, and end-to-end audit logging.
Compliance Inquiries & Reporting
For compliance verification, data protection inquiries, security reports, or regulatory correspondence, visit our Contact page
Compliance frameworks evolve continuously. For formal audit assessments, enterprise Vendor Risk Questionnaires (VRQs), or security whitepapers, please contact our compliance office.