Legal

Privacy Policy

QRGONG exists so that people can reach you without you handing out your phone number or your email address. This policy explains what we store, why we store it, and what we never show anyone.

Last updated 4 November 2026

01Who we are

QRGONG is a service of billig.ch GmbH (CHE-113.610.473), based in Switzerland. We are the controller of the personal data described here, which means we decide why and how it is processed.

Our registered details are billig.ch GmbH, CHE-113.610.473, Switzerland. Contact details are at the end of this policy.

02What this policy covers

It covers this website, the QRGONG web application, every QRGONG tag and personal code, the browser chats opened by scanning a QRGONG, and the emails we send.

It does not cover an external website you reach through a link, or a payment page operated by our payment provider.

03Data we collect

Account data: your email address, a password hash, and the date you registered. We never store your password itself.

QRGONG content: the title, subtitle, description, text and design choices of each QRGONG you create, and its world (things, places, contact, moments).

Conversations: the messages, photos and shared locations people send to your QRGONG, the name and reply contact a visitor chooses to give, and the times messages are sent and read.

Scans and technical data: when a QRGONG is opened we record that it was opened, together with the date, a truncated IP address and the browser type, so the owner can see activity and we can stop abuse. We do not build profiles of visitors.

QRGONG Me: your display name, the profile fields you switch on, connection requests, approved connections, and the messages exchanged inside them. Guests who ask to connect provide their name and email and confirm it with a 6-digit code.

Payments: when you tip an owner or order printed tags, our payment provider processes the card details. We receive and store the amount, currency, status, an order reference and the email address used at checkout. We never see or store full card numbers.

Notifications: the email address we send to, and, if you switch it on, a browser push subscription for your device.

04What we never show

Your phone number and your email address are never encoded in a QR code, never printed on a tag, and never shown to someone who scans one of your QRGONGs.

Conversations reach you through QRGONG. A visitor sees a chat, not your contact details.

Personal QRGONG profiles have no public directory and no search. A profile can only be opened by someone holding its code.

05Why we process it

To provide the service you asked for: creating QRGONGs, delivering messages between visitors and owners, and running approved connections. This is performance of our contract with you.

To keep the service safe and working: preventing spam, harassment and fraud, and diagnosing faults. This rests on our legitimate interest in a secure service.

To send you the notifications you enabled, and essential messages about your account. Notifications other than essential account messages can be switched off in your settings.

To meet legal obligations, including tax and accounting records for payments.

Where the law requires consent, we ask for it separately and you can withdraw it at any time.

06Cookies and local storage

We use the storage your browser provides to keep you signed in, to remember the language you chose, and to hold the private key that lets a visitor return to their own conversation.

We do not use advertising cookies and we do not sell data to anyone.

You can clear this storage in your browser at any time. Signing out, or clearing it, ends the sessions it holds.

07Who we share it with

We use service providers who process data on our instructions: hosting and database infrastructure, an email delivery provider for notifications and verification codes, a payment provider for card payments and payouts, and Apple and Google for wallet passes you choose to add.

A provider only receives what its task needs. They may not use it for their own purposes.

We also disclose data where we are legally required to, or where it is necessary to establish, exercise or defend legal claims.

We do not sell personal data.

08International transfers

Some providers process data outside Switzerland and the European Economic Area. Where that happens we rely on appropriate safeguards, such as standard contractual clauses or a recognised adequacy decision.

You can ask us for more detail about the safeguards that apply to a particular provider.

09How long we keep it

Account data and QRGONGs are kept for as long as your account exists.

Conversations are kept while the QRGONG exists, so you can read past chats, and are deleted when you delete the QRGONG or your account.

Pending verification codes are short-lived and expire automatically.

Payment and invoice records are kept for the period Swiss accounting law requires.

Scan and technical logs are kept for a limited period and then deleted or aggregated.

10Your rights

You can ask for a copy of your data, have inaccurate data corrected, have your data deleted, restrict or object to processing, and receive the data you gave us in a portable format.

Where processing rests on consent, you can withdraw it at any time; that does not affect processing that already happened.

Deleting your account deletes the QRGONGs that belong to it. A QRGONG transferred to another account belongs to that account.

You can also complain to a supervisory authority. In Switzerland that is the Federal Data Protection and Information Commissioner (FDPIC); in the EU or EEA it is the authority where you live or work.

To exercise a right, write to us using the contact details below. We may need to verify that the request comes from the account holder.

11Security

Data is transmitted over encrypted connections, conversations are restricted to the people a QRGONG belongs to, and access to production systems is limited.

No system is perfectly secure. If a breach affects your data and poses a high risk to you, we will inform you and the competent authority as the law requires.

12Children

QRGONG is not intended for children under 16. We do not knowingly collect their data. If you believe a child has created an account, tell us and we will delete it.

13Changes to this policy

If we change how we handle personal data, we update this page and its date. Significant changes are announced in the application or by email.

14Contact

Questions about this policy, or a request concerning your data, can be sent to info@qrgong.com.

Postal enquiries: billig.ch GmbH, Lindenstrasse 28, 8802 Kilchberg, Switzerland.