iris is a small independent service. Nothing is sold, nothing is shared with advertisers, and there is no analytics script on any page. What follows is the complete list of what is kept.
If you have an account
- Your email address, so you can sign in and so nobody else can claim your codes.
- A password hash, if you signed up with a password. The password itself is never stored.
- Your handle, display name and bio: all public by definition, they are your page.
- Your links and QR targets: the labels, the URLs, and the history of what each code has pointed at over time.
- Images you upload (avatars and image targets), stored in the database, served publicly at an unguessable URL.
If you scan somebody's code
You are not asked to do anything and nothing about you is stored, with one exception:
- A timestamp, so the code's owner can see that it was scanned.
- A two-letter country code, when Cloudflare passes one along with the request.
That is the whole record. No IP address. No user agent. No referrer. No cookie is set on the redirect. The scan is written after the redirect has already been sent, so it cannot even slow you down.
Cookies
One, and only while you are signed in: an encrypted session cookie. There is no tracking cookie, no third-party cookie, and no cookie at all on the public pages or the redirect.
Who else sees anything
Public traffic reaches the server through a Cloudflare tunnel, so Cloudflare handles the connection and sees the request the way any network provider does. That is also where the country code comes from. Nothing else is involved: no analytics provider, no error-reporting service, no advertising network, no data broker. Your data is not sold, rented, or handed to anyone, and there is nobody to hand it to.
Where the data lives
In a Postgres database on a single machine in a flat, on mirrored drives with local snapshots. There is no off-site copy, which is a durability trade-off you should know about, and also means there is no second place for your data to escape from.
Deleting it
Ask, and everything goes: account, profile, links, codes, target history, scan records and uploaded images. Whoever gave you the invite code knows how to reach the operator. One person reads the request, so give it a few days. See Terms for the rest.
One thing survives deletion by design: the eight-character slug itself is never reissued to anybody else, so a code you printed and then deleted resolves to nothing rather than to a stranger's page.